Governance, Risk, & Compliance Engineer (AI)

Location: On-site in New York, NY or San Francisco, CA

Company

hirify.global is a research lab building open AI models that make intelligence accessible, customizable, and extensible.

What you will do

• Design and build automated controls and monitoring for SOC 2, ISO 27001, NIST 800-53/800-171, and CMMC requirements.
• Develop tooling, pipelines, dashboards, intake forms, screening checks, and GRC platform integrations such as Vanta.
• Partner with Engineering, Security, and IT to implement technical controls for security, privacy, trade, and data governance requirements.
• Maintain integrations between compliance systems and identity, data infrastructure, and model pipeline source-of-truth systems.
• Translate regulatory, policy, and contractual requirements into technical specifications and support audits, customer questionnaires, and vendor assessments.
• Help define technical environment separations and system boundaries required for regulatory compliance.

Requirements

• 3–6 years of software engineering, security engineering, or DevOps/infrastructure experience.
• Hands-on engineering experience supporting at least one security framework, including SOC 2, ISO 27001, or NIST.
• Production-quality coding experience with Python or a similar language, plus API and integration development.
• Experience translating non-technical requirements into technical implementations.
• Familiarity with cloud infrastructure, identity and access management, GRC tooling, compliance automation, or TPRM platforms.
• Strong collaboration skills across compliance, legal, security, IT, and engineering stakeholders.

Nice to have

• Familiarity with CMMC, NIST 800-171/800-53, SOC 2, ISO 27001, or GDPR/CCPA technical requirements.
• Experience with data governance or data lineage tooling in ML/AI pipelines.
• Background in government contracting or another regulated environment.

Culture & Benefits

• On-site work with daily lunch and dinner provided in the office.
• Salary, equity, and stock options designed to support long-term participation in company growth.
• Medical, dental, vision, and life insurance with an annual wellness allowance.
• 22 weeks of paid parental leave for birthing, non-birthing, adoptive, and surrogate parents.
• Unlimited paid time off in the U.S.; visa sponsorship and long-term immigration support are available where applicable.
• Regular off-sites, happy hours, and team celebrations.