GRC Engineer

Highlights

• Build automated compliance controls that replace manual evidence collection.
• Translate AI governance and privacy policies into scalable technical controls.
• Support technical separations for regulated enclave environments.

What they offer

• Salary and equity structured to recognize and retain talent globally
• Stock options for all employees
• Comprehensive medical, dental, vision and life insurance plus annual wellness allowance
• Lunch and dinner provided in the office daily
• 22 weeks paid parental leave for all new parents
• Unlimited PTO in the U.S. and 30 days in the U.K.
• Regular off-sites, happy hours and team celebrations

Ideal candidate

An engineer who treats compliance as a product problem and loves automation. You bridge legal and engineering with ease and want to build defensible systems for open AI at startup speed.

Requirements

• 3-6 years of software engineering, security engineering, or DevOps/infrastructure experience
• Hands-on experience supporting at least one security framework (SOC 2, ISO 27001, or NIST) as an engineer
• Comfortable writing production-quality code (Python, or similar) and working with APIs/integrations
• Experience translating non-technical requirements (policy, regulatory, contractual) into technical implementation
• Familiarity with cloud infrastructure and identity/access management concepts
• Strong collaboration skills across compliance, legal, and engineering stakeholders
• Experience building or maintaining GRC tooling, TPRM/vendor risk platforms, or compliance automation (e.g., Vanta)
• Familiarity with CMMC, NIST 800-171/800-53, SOC 2, ISO 27001, GDPR/CCPA technical requirements
• Experience with data governance or data lineage tooling, especially in ML/AI pipelines
• Background supporting a government contracting or regulated environment