Security GRC Engineer

You will design, implement, and scale governance, risk, and compliance programs. You will automate compliance workflows, conduct reviews, support contract and incident communications, maintain policies, and build documentation and tools for security and AI governance inquiries.

Responsibilities

• Automate evidence gathering and continuous control testing
• Manage relationships with audit firms and customers
• Conduct security compliance reviews for products, features, and vendors
• Support contract negotiations with security and AI governance guidance
• Draft and review customer-facing incident communications
• Build self-service security and AI governance documentation and tools
• Maintain corporate security policies

Requirements

• Experience with GRC frameworks including SOC 2, ISO 27001, ISO 42001, and AIUC-1
• Ability to trace external claims to product and infrastructure configurations
• Cross-functional collaboration with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators