Aircall
Senior GRC Engineer
$180K–$200K
New York Office · Hybrid · Senior · Full-time · Posted Dec 15, 2025
- Experience
- 5+ years in security, including at least 2–3 years in a GRC engineering, security engineering, or compliance automation role.
About the job
Build and operate engineering systems that automate Aircall’s GRC controls, evidence collection, audit readiness, and risk and vendor-security processes.
What you'll do
- Design technical controls and integrations for continuous monitoring and automated evidence collection across cloud, SaaS, and corporate systems.
- Develop compliance-as-code workflows and support SOC 2 and ISO 27001 audits, including evidence preparation and remediation.
- Operate risk and vendor-security processes and partner with teams on security, privacy, incident response, and compliance.
What they ask for
- 5+ years in security, including at least 2–3 years in GRC engineering, security engineering, or compliance automation at a SaaS or cloud-native company.
- Strong working knowledge of SOC 2, ISO 27001, NIST CSF / 800-53, and GDPR.
- Hands-on experience with a modern GRC platform, including building or extending integrations; experience supporting external audits as a technical lead.
- Ability to write code (Python, Go, or similar) and work with AWS APIs, Terraform/IaC, and CI/CD pipelines.
Nice to have
- Relevant certifications (CISA, CISSP, ISO 27001 LI/LA, AWS/GCP security); privacy engineering experience or experience building an early-stage GRC function.
Pay
USD 180,000–200,000 per-year-salary (base salary)
Tools
Drata, Python, Go, AWS, Terraform/IaC, CI/CD, Jira, Slack
AI focus
Comfortable using AI tools to accelerate delivery and scale impact.
Model-written summary · the original posting is authoritative