204 grc engineer jobs at 145 companies in United States

1mo
Save
Mark Applied
Hide
GRC Engineer
New York City, New York, United States
$188k-$221k/yr OnsiteFull Time
Legora
Legora: Agentic AI operating system for legal professionals and teams.
5+ YOE5+ years across software/automation engineering and security compliance, production-grade scripting (Python), GRC domain fluency (SOC 2/ISO 27001), clear technical writing, and experience building LLM/agent workflows.
Python, OSCAL, Terraform, CI/CD, APIs, LLM
3mo
Save
Mark Applied
Hide
GRC Engineer
Palo Alto or San Francisco
$130k-$170k/yr OnsiteAll Commitments Available
Zania
Zania: Agentic AI software helping enterprise security, risk, and compliance teams automate GRC workflows.
3+ YOE3–8 years in GRC, information security, risk management, audit, or enterprise tech customer success; strong frameworks knowledge (SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS); proven stakeholder management and communication; SaaS/technical product experience.
GRC frameworks, SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS
3mo
Save
Mark Applied
Hide
GRC Engineer
Foster City, California, United States
$210k-$320k/yr HybridFull Time
SolutionBox Insight
SolutionBox Insight: Agentic software creation platform that lets anyone build applications using natural language.
8+ YOE8+ years in GRC or information security; deep cloud (GCP/AWS) and security architecture; strong regulatory experience; automation mindset with GRC tools.
GCP, AWS, Vanta, Drata, SOC 2, ISO 27001, PCI, HIPAA
1mo
Save
Mark Applied
Hide
GRC Engineer
United States
RemoteFull Time
ButterflyMX
ButterflyMX: Cloud-based property access platform providing hardware and software security solutions to multifamily and commercial property owners.
3+ YOE3+ years in GRC or risk/compliance; SOC 2 audit experience; Vanta experience; familiarity with NIST/ISO frameworks; strong writing and organizational skills; proven use of AI tooling to automate GRC workflows.
Vanta
5d
Save
Mark Applied
Hide
GRC Engineer - REMOTE
United States
$110k-$143k/yr RemoteFull Time
Velera
Velera: Credit-union-owned payments CUSO and fintech provider serving more than 4,000 financial institutions.
10+ YOEBachelor's degree or equivalent experience; 10+ years as a DBA or GRC Engineer; database compliance, security GRC, program management, control automation, stakeholder collaboration, and AI solutions experience.
Compliance-as-Code (CaC), Policy-as-Code (PaC), Continuous Control Monitoring (CCM), Azure, Infrastructure-as-Code (IaC), Azure Policy, Open Policy Agent (OPA), Rego, CI/CD, Python, PowerShell, Go, SOC 1, SOC 2, NIST, PCI-DSS, IAM, PIM, AI, HSA, FSA, EAP
1mo
Save
Mark Applied
Hide
Senior GRC Engineer
United States
$130k-$150k/yr RemoteFull Time
Flock Safety
Flock Safety: Public-safety technology serving law enforcement, communities, and businesses with license-plate, video, audio, drone, and investigative systems.
Experience in GRC/IT audit for cloud/SaaS, SOC 2 and ISO frameworks, automation of compliance workflows, customer due diligence, and collaboration with engineering and legal teams.
AWS
2mo
Save
Mark Applied
Hide
GRC Engineer
Chicago, Illinois, United States
$130k-$145k/yr HybridFull Time
NinjaTrader
NinjaTrader: Privately held futures trading platform and brokerage serving retail and professional futures traders.
3+ YOE3–5 years in GRC/IT audit/security compliance; hands-on SOC 2/ISO 27001/SOX audits; scripting/automation with Python and REST APIs; familiarity with major cloud platforms and CI/CD; strong documentation and stakeholder skills.
Python, REST APIs, Terraform, SQL, AWS, GCP, Azure, CI/CD
3d
Save
Mark Applied
Hide
Lead GRC Engineer
San Francisco or California or United States
$220k-$280k/yr HybridFull Time
Higgsfield AI
Higgsfield AI: AI-native video and image creation platform for creators, marketers, brands, agencies, and studios.
6+ YOERequires 6+ years across security, GRC, software or automation engineering; experience automating technical controls, Python scripting, APIs, integrations, SOC 2, ISO 27001, and continuous monitoring.
Python, APIs, SOC 2, ISO 27001, cloud infrastructure, IdP, HRIS, source control, CI/CD, SaaS
1w
Save
Mark Applied
Hide
Staff Security Engineer, GRC
New York City, New York, United States
$246k-$287k/yr HybridFull Time
Oscar Health
Oscar HealthNYSE: OSCR: Technology-driven health insurance and managed care provider.
7+ YOERequires 7+ years in GRC, cloud security, security engineering, audit, or regulated technology; expertise in CMS EDE, NIST SP 800-53, AWS control implementation, compliance automation, audits, and risk management.
AWS, Azure, NIST SP 800-53, infrastructure as code, policy as code, GRC platforms, SIEM
1mo
Save
Mark Applied
Hide
Senior GRC Engineer
United States
RemoteFull Time
Workstreet
Workstreet: AI-powered cybersecurity and compliance firm serving high-growth technology companies with security, privacy, and compliance services.
3+ YOE3+ Mgmt3+ years GRC experience with SOC 2/ISO 27001/NIST CSF, 3+ years people leadership, client relationship management, project management, policy development, strong written and verbal English.
Vanta, SOC 2, ISO 27001, NIST CSF, HIPAA, PCI DSS
2w
Save
Mark Applied
Hide
GRC (Governance, Risk, and Compliance) Engineer
Carmel, Indiana, United States
$149k-$163k/yr OnsiteFull Time
Midcontinent Independent System Operator
Midcontinent Independent System Operator: Independent nonprofit regional transmission organization managing high-voltage electricity for 45 million people across 15 states and Manitoba.
10+ YOERequires 10+ years of professional experience, including 4 years in GRC engineering or a similar role, scripting, REST API integration, enterprise GRC platforms, and risk and compliance operations.
Python, PowerShell, JavaScript, REST APIs, Archer
3w
Save
Mark Applied
Hide
GRC Controls Automation Engineer
Austin or Chicago or New York City or Redwood City or San Francisco or United States
$130k-$145k/yr HybridFull Time
Box
BoxNYSE: BOX: Intelligent content management and collaboration platform.
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
GCP, AI, NIST 800-53, PCI, ISO 27x, AICPA SOC, SOC 2
1mo
Save
Mark Applied
Hide
GRC Engineer - Platform Team
Berlin or Iași or London or New York City or São Paulo
HybridFull Time
Taktile
Taktile: Fintech providing an AI-powered decision platform for banks, insurers, and other financial institutions.
4+ YOE4+ years GRC or security compliance at a SaaS company; owned SOC 2 program; Vanta/Drata/Secureframe experience; hands-on scripting against AWS for automated evidence; strong written communication.
AWS, Vanta, Drata, Secureframe
3w
Save
Mark Applied
Hide
GRC Software Engineer
Columbus or Chicago or Detroit or Tupelo or Charlotte or Dallas or Atlanta or Houston or Birmingham
$70k-$140k/yr OnsiteFull Time
Huntington Bank
Huntington BankNASDAQ: HBAN: A regional bank offering consumer, commercial, and financial services.
5+ YOEBachelor's degree or 4+ years equivalent experience, 5+ years software development, and preferably 5+ years in GRC systems. Requires analytical, troubleshooting, communication, and programming skills.
Archer, OpenPages, ProcessUnity, ServiceNow IRM, AWS, Apigee, Linux OS, OpenShift, .NET, C#, Python, Java, Microsoft Office
1w
Save
Mark Applied
Hide
ServiceNow GRC Developer
United States
RemoteFull Time
NoblQ
NoblQ: NoblQ is a private global IT services firm delivering AI engineering, enterprise platforms, and professional services to enterprises.
5+ YOERequires 5+ years of ServiceNow development, strong GRC/IRM, integrations, upgrades, JavaScript, scripting, configuration, customization, troubleshooting, and independent enterprise platform experience.
ServiceNow, ServiceNow GRC, Integrated Risk Management (IRM), Platform Management Studio, REST, SOAP, IntegrationHub, MID Server, JavaScript, Business Rules, Client Scripts, Script Includes, ACLs, UI Policies, Flow Designer
2mo
Save
Mark Applied
Hide
Staff GRC Engineer (Remote)
Boston or United States
$165k-$210k/yr HybridFull Time
ezCater
ezCater: Workplace food platform connecting organizations to restaurants for corporate catering and employee meal programs.
8+ YOE8+ years in security GRC or compliance for SaaS/cloud; deep knowledge of ISO-27001, NIST CSF, SOC 2, ITGC, PCI; experience automating control testing and evidence collection; familiarity with Policy-as-Code (Terraform), AWS, GitHub; strong communication.
Terraform, AWS, GitHub, APIs
1w
Save
Mark Applied
Hide
GRC Engineer
San Mateo, California, United States
$200k-$250k/yr OnsiteFull Time
Verkada
Verkada: Physical security platform for enterprise buildings and facilities.
7+ YOERequires 7+ years in security or IT compliance, cloud service experience, software compliance experience, and SOC 2 or ISO 27001 audit, risk, and compliance experience.
AWS, GitHub, Python, JSON
1mo
Save
Mark Applied
Hide
GRC Engineer
United States or Europe
RemoteFull Time
ZBD
ZBD: Private gaming fintech providing licensed financial infrastructure, rewards, payouts, and accounts for game developers and publishers.
3+ YOE3+ years in security governance, cloud and application security, risk management, and third-party risk; experience with Infrastructure as Code (Terraform/OpenTofu), Linux, Git/GitLab and CI/CD; strong security and compliance skills.
Terraform, OpenTofu, Linux, Git, GitLab, CI/CD, SOC 2, DORA, GDPR, PCI DSS, AWS Organizations, Bitcoin, Lightning Network
1mo
Save
Mark Applied
Hide
GRC Engineer
Austin, Texas, United States
HybridFull Time
Cloudflare
CloudflareNYSE: NET: Cloud-based security, performance, and reliability services for Internet applications.
5+ YOE5+ years in security/compliance/automation; strong automation and IaC/Policy-as-Code experience (Terraform, Pulumi, OPA/Rego); proficiency with Python/Go, JS/TypeScript, React, REST APIs; AI governance experience.
Terraform, Pulumi, OPA/Rego, Python, Go, JavaScript, TypeScript, React, REST APIs, Cloudflare Workers, R2, D1, Workers AI
1w
Save
Mark Applied
Hide
Principal GRC Business Engineer
California, United States
$168k-$271k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Global cybersecurity platform providing network, cloud, and AI-driven security solutions.
10+ YOERequires 10+ years in information security or IT risk, including 6+ years in GRC, a computer science or cybersecurity-related degree, and active CISSP, CRISC, CISM, or CISA certification.
AWS, Azure, GCP, NIST SP 800-53, NIST CSF, SOC 2 Type II, PCI-DSS, GDPR, NIST AI RMF, ISO 42001