Назад
Company hidden
10 часов Π½Π°Π·Π°Π΄

GRC Engineer (AI)

108Β 600 - 131Β 000$
Π€ΠΎΡ€ΠΌΠ°Ρ‚ Ρ€Π°Π±ΠΎΡ‚Ρ‹
remote (Ρ‚ΠΎΠ»ΡŒΠΊΠΎ USA)
Π’ΠΈΠΏ Ρ€Π°Π±ΠΎΡ‚Ρ‹
fulltime
Π“Ρ€Π΅ΠΉΠ΄
middle
Английский
b2
Π‘Ρ‚Ρ€Π°Π½Π°
US
Вакансия ΠΈΠ· списка Hirify.GlobalВакансия ΠΈΠ· Hirify Global, списка ΠΌΠ΅ΠΆΠ΄ΡƒΠ½Π°Ρ€ΠΎΠ΄Π½Ρ‹Ρ… tech-ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΉ
Для мэтча ΠΈ ΠΎΡ‚ΠΊΠ»ΠΈΠΊΠ° Π½ΡƒΠΆΠ΅Π½ Plus

ΠœΡΡ‚Ρ‡ & Π‘ΠΎΠΏΡ€ΠΎΠ²ΠΎΠ΄

Для мэтча с этой вакансиСй Π½ΡƒΠΆΠ΅Π½ Plus

ОписаниС вакансии

ВСкст:
/
TL;DR
GRC Engineer (AI): Building programmable GRC systems, AI agent workflows, evidence collection pipelines, continuous control monitoring, and compliance integrations with an accent on automation, APIs, and actionable risk visibility. Focus on codifying controls across CI/CD and Terraform, integrating AWS security signals, automating vendor risk and customer assurance workflows, and supporting FAIR-informed quantitative risk modeling.

Location: Remote; annual team on-site in the US/CAN with total travel below 10%

Salary: $108,600–$131,000 per year

Company

hirify.global provides an agentic experience platform that uses AI agents to help marketing and data teams acquire, retain, and grow customers across web, mobile, and desktop.

What you will do

  • Build AI agent workflows using Claude, MCP integrations, and similar tools to automate repeatable GRC tasks.
  • Configure and extend the GRC platform through data relationships, control workflows, custom rules, APIs, and webhooks.
  • Design automated evidence collection, continuous control monitoring, executive reporting, and compliance checks across CI/CD and Terraform.
  • Embed compliance checkpoints into design reviews and build tooling for FAIR-informed quantitative risk modeling.
  • Automate the third-party risk management lifecycle, including vendor intake, scoring, questionnaires, evidence analysis, and remediation tracking.
  • Build dashboards and automation for access governance, customer trust workflows, security awareness, and training.

Requirements

  • 3+ years of experience in Security Engineering, DevSecOps, Technical GRC, or a closely related function, with a strong automation and tooling background.
  • Proficiency in Python and/or TypeScript, REST APIs, JSON/YAML payloads, webhooks, and enterprise integrations.
  • Hands-on experience extending enterprise systems and working with a modern GRC platform such as Vanta, Anecdotes, Drata, or Secureframe.
  • Working knowledge of SOC 2, ISO 27001/17/18, ISO 42001, and HIPAA, including programmatic control testing.
  • Experience with AI-assisted automation, agent workflows, prompt pipelines, or LLM-integrated integrations.
  • Familiarity with AWS IAM, CloudTrail, Config, GuardDuty, GitHub Actions or similar CI/CD workflows, and Terraform.

Culture & Benefits

  • Fully remote work with an annual on-site team gathering in the US/CAN and less than 10% travel.
  • Medical, dental, and vision coverage plus an Employee Assistance Program.
  • Company-paid life insurance, short- and long-term disability coverage, and a 401(k) with a 4% company match.
  • Restricted Stock Units, Flexible Time Off, and up to 26 weeks of paid parental leave.
  • Global reproductive health and family-building support through Carrot.
  • Culture centered on diversity, inclusion, ownership, initiative, and continuous innovation.

Π‘ΡƒΠ΄ΡŒΡ‚Π΅ остороТны: Ссли Ρ€Π°Π±ΠΎΡ‚ΠΎΠ΄Π°Ρ‚Π΅Π»ΡŒ просит Π²ΠΎΠΉΡ‚ΠΈ Π² ΠΈΡ… систСму, ΠΈΡΠΏΠΎΠ»ΡŒΠ·ΡƒΡ iCloud/Google, ΠΏΡ€ΠΈΡΠ»Π°Ρ‚ΡŒ ΠΊΠΎΠ΄/ΠΏΠ°Ρ€ΠΎΠ»ΡŒ, Π·Π°ΠΏΡƒΡΡ‚ΠΈΡ‚ΡŒ ΠΊΠΎΠ΄/ПО, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡ‚Π΅ этого - это мошСнники. ΠžΠ±ΡΠ·Π°Ρ‚Π΅Π»ΡŒΠ½ΠΎ ΠΆΠΌΠΈΡ‚Π΅ "ΠŸΠΎΠΆΠ°Π»ΠΎΠ²Π°Ρ‚ΡŒΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡˆΠΈΡ‚Π΅ Π² ΠΏΠΎΠ΄Π΄Π΅Ρ€ΠΆΠΊΡƒ. ΠŸΠΎΠ΄Ρ€ΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β†’