Staff GRC Engineer (AI)
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
TL;DR
Staff GRC Engineer (AI): Leading the maturity of governance, risk, and compliance programs within a cloud-native environment with an accent on automation, data security, and AI governance. Focus on building continuous control monitoring, implementing policy-as-code, and driving operational quality across engineering and business systems.
Location: Must be based in the US (Remote or Hybrid in Boston, MA).
Compensation: $165,000β$210,000 annually.
Company
A leading food tech platform for workplaces, providing scalable meal solutions and restaurant management tools.
What you will do
- Design and maintain an auditable control framework tailored to SaaS and cloud environments.
- Define and implement AI Governance strategies across Legal, Data, and Engineering domains.
- Automate control testing, evidence collection, and validation workflows using technical approaches.
- Partner with audit stakeholders to manage SOX, SOC 2, and PCI-DSS compliance requirements.
- Mature data security policies, including classification, access patterns, and retention standards.
- Drive operational improvements by mentoring teams and implementing agentic workflows for GRC tasks.
Requirements
- 8+ years of experience in security GRC, compliance, or risk management in SaaS/cloud-native environments.
- Strong expertise in frameworks like ISO-27001, NIST CSF, SOC 2, and PCI-DSS.
- Proven ability to automate compliance programs using scripting, APIs, or platform configuration.
- Experience with Policy-as-Code (Terraform) and secure cloud configurations (AWS).
- Familiarity with governing AI/Agentic systems and business processing.
- Must be authorized to work in the US (no visa sponsorship provided).
Nice to have
- Experience scaling unified control frameworks across multiple compliance standards.
- Background in continuous control monitoring and GRC platform evidence tooling.
- Practical experience translating AI governance into technical guardrails.
Culture & Benefits
- Flexible remote-hybrid work policy with an office in Boston.
- Comprehensive benefits including 401K with match, health, dental, and vision insurance.
- Generous time off including 12 paid holidays and flexible PTO.
- Support for mental health, family planning, and long-term disability.
- Employee meal program and stock options.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β