Design and build automated controls and monitoring that satisfy security framework requirements (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC): access reviews, data minimization, model/data lineage, continuous evidence collection

Partner with Engineering, Security, and IT to implement technical requirements arising from security frameworks, deemed export controls, and privacy regulations

Build and maintain internal tooling that supports compliance workflows (intake forms, screening checks, reporting dashboards, GRC platform integrations such as Vanta)

Translate regulatory and policy requirements into concrete technical specifications engineering teams can implement

Support technical due diligence for inbound customer security questionnaires, audits, and outbound vendor assessments

Maintain integrations between compliance/GRC systems and source-of-truth systems (identity, data infrastructure, model pipelines)

Help scope and support technical environment separations or system boundaries required for regulatory compliance (e.g., subsidiary or enclave environments)

GRC Engineer

Responsibilities

Qualification

Required

Benefits

Company

Reflection AI

More roles at Reflection AI