GRC Engineer

📋 Description Own day-to-day GRC operations - including (but not limited to) performing risk assessments, driving Perform and improve security risk assessments, maintain the risk register, partner with risk owners Own the third-party risk management lifecycle, including vendor intake, risk-based tiering Establish automated control monitoring systems and continuous compliance workflows to maintain Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements 🎯 Requirements Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field 5–8 years of experience in security GRC, risk management, or compliance program ownership Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor) Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting Strong organizational skills and ability to manage multiple priorities under tight deadlines Strong written and verbal communication skills with technical execution rigor 🎁 Benefits Base salary, equity, and benefits Comprehensive health, dental, vision, life and disability insurance coverage 401k retirement benefits with employer match Learning and wellness stipends Paid time off