Lead GRC Engineer

Required

• 6+ years spanning security, GRC, software engineering, automation engineering, or related technical roles.
• Demonstrated experience translating framework, regulatory, or policy requirements into technical implementations.
• Hands-on experience personally building or automating security and compliance controls.
• Production-grade scripting or programming experience, such as Python, including working with APIs and integrations.
• Strong understanding of frameworks such as SOC 2 and ISO 27001 and what constitutes credible control evidence.
• Ability to distinguish between a control that technically exists and one that is actually effective, enforced, and continuously monitored.
• Experience building in rapidly changing or 0→1 environments without relying on mature infrastructure or large teams.
• Strong judgment around automation, risk, exceptions, enforcement, and engineering velocity.
• Ability to communicate technical controls and evidence clearly to auditors, customer security teams, engineers, and nontechnical stakeholders.