Applied Intuition
GRC Engineer
$160K–$190K
Sunnyvale · On-site · Full-time · Posted Oct 12, 2026
- Experience
- 5–8 years of experience in security GRC, risk management, or compliance program ownership.
- Education
- Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.
About the job
Own and improve security governance, risk, and compliance operations, including risk management, third-party assessments, continuous compliance, and AI governance.
What you'll do
- Manage security risk assessments, the risk register, and remediation with risk owners.
- Own third-party risk management and automate vendor assessment workflows.
- Build continuous compliance and control-monitoring systems; administer GRC platforms and support AI governance.
What they ask for
- Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.
- Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor).
- Experience building scalable GRC automations using AI agents, custom tooling, or scripting.
- Hands-on experience with security and privacy frameworks such as ISO42001, NIST AI RMF, ISO27001/17/18, TISAX, SOC 2 or NIST CSF.
Nice to have
- Software engineering or technical background building automations for evidence collection, control validation, or audit workflows.
- Experience defining security metrics/KPIs and executive reporting frameworks; completing customer security questionnaires and assurance reviews; or exposure to automotive security and safety standards.
Pay
$160K – $190K USD base salary
Tools
Vanta, Anecdotes, Drata, OneTrust, ISO42001, NIST AI RMF, ISO27001/17/18, TISAX
AI focus
Support AI governance aligned with ISO 42001 and NIST AI RMF, translating requirements into controls, assessments, and evidence; build GRC automations using AI agents.
Model-written summary · the original posting is authoritative