Aegis AI
GRC Engineer
United States · Remote · Full-time · Posted Oct 2, 2026
- Experience
- 4+ years in GRC, security compliance, or audit at a SaaS company; has run a SOC 2 Type II end to end at least once.
About the job
Own Aegis AI’s security compliance program, audit readiness, risk management, evidence automation, and customer security reviews.
What you'll do
- Run SOC 2 and auditor relationships; maintain policies, framework mappings, and audit-ready evidence.
- Manage risk, vendor and subprocessor reviews, business continuity, disaster recovery, and incident response plans.
- Answer customer security questionnaires and TPRM reviews, and expand evidence collection through APIs and scripts.
What they ask for
- 4+ years in GRC, security compliance, or audit at a SaaS company; have run a SOC 2 Type II end to end at least once.
- Experience answering enterprise security questionnaires and clear writing skills.
- Ability to read architecture diagrams and assess whether controls operate in practice.
- Scripting skills in Python or similar, comfort with APIs, and working knowledge of major privacy regimes for data processors.
Nice to have
- Implemented ISO 27001 or supported certification; experience with compliance automation platforms.
- AI governance exposure, BC/DR experience for production SaaS, privacy certifications, or experience at a security vendor.
Tools
Python, APIs, SOC 2 Type II, ISO 27001, ISO 42001, NIST AI RMF
AI focus
AI governance exposure is a bonus, including ISO 42001, NIST AI RMF, or developing an AI policy.
Model-written summary · the original posting is authoritative