20 grc engineer jobs at 17 companies in Cotati, CA

2mo
Save
Mark Applied
Hide
GRC Engineer
Palo Alto or San Francisco
$130k-$170k/yr OnsiteAll Commitments Available
Zania
Zania: Automates enterprise risk and compliance using agentic AI teammates.
3+ YOE3–8 years in GRC, information security, risk management, audit, or enterprise tech customer success; strong frameworks knowledge (SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS); proven stakeholder management and communication; SaaS/technical product experience.
GRC frameworks, SOC 2, ISO 27001, NIST CSF, FedRAMP, HIPAA, PCI-DSS
1mo
Save
Mark Applied
Hide
Senior GRC Engineer
San Francisco, California, United States
$180k-$200k/yr OnsiteFull Time
Postman
Postman: Platform for building, testing, and managing software APIs.
6+ YOE6+ years GRC experience in tech, SOC2/ISO27001/HIPAA/GDPR/CCPA/FedRAMP knowledge, proficiency in Python or JavaScript, experience integrating GRC tooling, and strong communication.
Python, JavaScript
4d
Save
Mark Applied
Hide
GRC Controls Automation Engineer
Austin or Chicago or New York City or Redwood City or San Francisco or United States
$130k-$145k/yr HybridFull Time
Box
BoxNYSE: BOX: Provides cloud-based content management and secure file sharing services.
5+ YOE5+ years in SaaS GRC or information security; GCP, AI architectures, data governance, model validation, NIST, PCI, ISO, SOC 2, communication, and process improvement experience.
GCP, AI, NIST 800-53, PCI, ISO 27x, AICPA SOC, SOC 2
3w
Save
Mark Applied
Hide
Security Engineer, GRC
San Francisco or Seattle or New York City
$156k-$214k/yr HybridFull Time
Plaid
Plaid: Provides financial data connectivity and payment infrastructure via APIs.
Strong Python and SQL, AWS and cloud security experience, Terraform and policy-as-code (OPA/Rego, Sentinel), CI/CD integration, continuous controls monitoring, GRC framework knowledge, and AI tooling experience.
Python, SQL, AWS, GitHub, Terraform, OPA/Rego, Sentinel, Mode, Claude, OpenAI, Anecdotes, Drata, Vanta, Paramify
2mo
Save
Mark Applied
Hide
Senior AI GRC Engineer
United States or San Francisco or New York City or London or Dublin or Tel Aviv or Sydney
$178k-$209k/yr RemoteFull Time
Vanta
Vanta: Automated security compliance and trust management software for businesses.
Deep expertise in AI governance, risk, and compliance; experience using AI agents and building automations; coding experience with TypeScript, Go, or Python; cloud-native security knowledge (AWS); experience with compliance programs (SOC 2, ISO).
Anthropic products, OpenAI products, LangChain products, Cursor, TypeScript, Go, Python, AWS
3mo
Save
Mark Applied
Hide
Senior GRC Lead
Vancouver or New York City or San Francisco
$154k-$192k/yr HybridFull Time
Brex
Brex: Corporate cards and spend management software for businesses.
5+ YOE5+ years in GRC or Security Engineering; strong automation; security frameworks SOC 2, PCI DSS, ISO 27001; Python and API integrations; cross-functional collaboration; cloud native; Terraform.
Python, APIs, Terraform, Tines
2mo
Save
Mark Applied
Hide
Security and Compliance Engineer
Bangalore or San Francisco
OnsiteFull Time
Hevo Data
Hevo Data: Automated no-code data pipeline platform for real-time analytics.
5+ YOE5+ years in security or compliance engineering; hands-on SOC 2 Type II audit ownership; cloud security (AWS/GCP/Azure); GRC tooling experience; strong written communication and policy authorship skills.
SOC 2 Type II, ISO 27001, GDPR, CCPA, AWS, GCP, Azure, Sprinto, Tugboat Logic, GRC, CI/CD, infrastructure-as-code, DevSecOps, SDLC, IAM
2mo
Save
Mark Applied
Hide
Staff Software Engineer, Core GRC
San Francisco, California, United States
$201k-$272k/yr HybridFull Time
Drata
Drata: Automated security and compliance platform for businesses.
10+ YOE10+ yrs software eng; 3+ yrs Node.js or React; 1+ yr NestJS; CS degree or equivalent; OAuth/SCIM/OIDC/RBAC experience; cloud platforms; REST, TS/JS; CI/CD; Git.
Node.js, React, NestJS, JavaScript, TypeScript, OAuth, SCIM, OIDC, RBAC, REST, Git, CI/CD, AWS, GCP, Azure, Terraform, Pulumi, TypeORM, Jest, Redis, ElasticSearch
2mo
Save
Mark Applied
Hide
Forward Deployed Security Engineer
Seattle or San Francisco or United States
$125k-$175k/yr RemoteFull Time
Clearly AI
Clearly AI: Automates enterprise security and privacy reviews using AI.
2+ YOE2+ years in GRC, privacy, or security engineering; hands-on threat modeling, vendor risk, and security tool integrations; strong project management and customer debugging skills.
Jira, ServiceNow, Confluence, GitHub, Linear
3d
Save
Mark Applied
Hide
GRC Program Manager, Assurance Engineering & Control Systems
San Francisco, California, United States
$216k-$252k/yr HybridFull Time
OpenAI
OpenAI: Develops artificial intelligence models and generative AI software services.
Experience owning audits or assurance outcomes, designing controls, testing evidence, and managing remediation; technical fluency in cloud, identity, logging, APIs, data flows, automation, and operational workflows.
Codex, SQL, APIs, SOC 2, ISO 27001, ISO 27017, PCI DSS, NIST, FedRAMP
5d
Save
Mark Applied
Hide
Senior Cloud Security Engineer - InfoSec
San Francisco or New York or Portland or United States or Canada
$167k-$208k/yr RemoteFull Time
Mercury
Mercury: Banking services and financial software designed for startup companies.
5+ YOE5+ years cloud security experience; familiarity with security frameworks, GRC, IaC, AWS; strong analytical and problem-solving skills; AWS certifications encouraged.
AWS
2mo
Save
Mark Applied
Hide
Sales Engineer - Mid-West US (OH/MN)
Ohio or Minnesota or San Francisco or Tel Aviv
OnsiteFull Time
BlinkOps
BlinkOps: Agentic security automation platform for enterprise workflows.
3+ YOE3+ years in sales/solutions engineering in cybersecurity, strong security operations knowledge, hands-on with APIs, JSON/YAML and jq, experience with SIEM/SOAR/EDR/IAM/GRC integrations, demo/POC and customer-facing skills.
APIs, JSON, YAML, jq, SIEM, SOAR, EDR, IAM, GRC, AWS, Azure, GCP, MEDDPICC, Value Selling
2mo
Save
Mark Applied
Hide
Staff Trust & Assurance Engineer
San Francisco, California, United States
$261k-$305k/yr OnsiteFull Time
Kikoff
Kikoff: A fintech focused on financial security for consumers.
7+ YOE7+ years in security compliance, GRC, or technical audit; end-to-end SOC 2 Type II and PCI DSS experience; IaC and IAM; cloud-native; auditor liaison; strong written and engineering deliverables.
Git, CI/CD, Infrastructure as Code, Cloud platforms, IAM
2mo
Save
Mark Applied
Hide
Member of Technical Staff, DevSecOps
San Francisco or Europe or Australia
$180k-$280k/yr HybridFull Time
Vapi
Vapi: Build and deploy AI-powered voice agents via flexible APIs.
5+ YOE5+ years engineering experience in cloud-native SaaS; strong security experience for multi-tenant cloud environments; proficiency with AWS, Kubernetes, and Postgres; ability to write/review code and implement shift-left security.
AWS, Kubernetes, Postgres, VoIP, CI/CD, Drata, SOC 2, ISO 27001, HIPAA, GRC
2mo
Save
Mark Applied
Hide
Solution Engineer (Pre-Sales)
Los Angeles or San Francisco
$140k-$170k/yr RemoteFull Time
Zip
Zip: AI-powered intake-to-procure platform for enterprise spend management
3+ YOE3+ years mid-market B2B solutioning experience; strong solution selling, discovery, troubleshooting, integration knowledge (iPaaS, APIs/REST); ability to present to cross-functional and executive audiences.
iPaaS, APIs, REST APIs, NetSuite, Sage, Workday, Oracle, CLMs, GRC
2mo
Save
Mark Applied
Hide
Sr. Director, Security
San Francisco or United States or Canada
$308k-$463k/yr RemoteFull Time
Zapier
Zapier: Connects web applications to automate repetitive workflows without coding.
Executive security leader to set strategy, lead App/Infra/Detection & Response/GRC teams, run risk and incident programs, partner with executives and Product/Engineering, and drive enterprise trust for an AI-native SaaS platform.
ChatGPT, Claude, Gemini
2mo
Save
Mark Applied
Hide
Strategic Partner Development, Product Partnerships - Cybersecurity
San Francisco or New York City
$240k-$300k/yr OnsiteFull Time
Anthropic
Anthropic: Developing safe and reliable artificial intelligence systems.
10+ YOE10+ years in security industry partnerships with a track record in complex multi-stakeholder deals; deep domain expertise in SIEM/SOAR, EDR, identity, cloud security, GRC; ability to work cross-functionally with research, product, engineering, policy and legal.
Security tools, Partnerships tooling, Product integration knowledge
1mo
Save
Mark Applied
Hide
Risk Consulting - Risk Technology - SAP Controls - Manager (New York, NY, US, 10001-8604)
New York City or Atlanta or Boston or Chicago or Cleveland or Dallas or Detroit or Pittsburgh or Hoboken or Houston or Los Angeles or McLean or Miami or Minneapolis or North Carolina or Philadelphia or Portland or San Francisco or Seattle or Tampa
$150k-$260k/yr HybridFull Time
EY
EY: Global firm providing audit, tax, and professional consulting services.
6+ YOE6+ years SAP controls experience with controls design, automation, build, test and deploy; bachelor’s or master’s in engineering, accounting, finance or supply chain; strong project management, leadership, communication and analytical skills; valid US driver’s license and passport; willingness to travel internationally.
SAP, GRC