Cursor
Security GRC Engineer
San Francisco, CA +1 · On-site · Full-time · Posted Sep 22, 2026
- Location
- San Francisco, CA
Palo Alto, CA
About the job
Designs and scales the security governance, risk, and compliance program, automating workflows and helping teams demonstrate that products and infrastructure meet security and AI governance standards.
What you'll do
- Automate evidence gathering and continuous control testing; build self-serve customer security tools and documentation.
- Conduct compliance reviews for products, features, and vendors; maintain corporate security policies and support incident communications and contract guidance.
- Manage relationships with audit firms and customers, explaining the security and AI governance program.
What they ask for
- Experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
- Ability to verify external security claims against product and infrastructure configurations, using coding agents and curiosity to identify and resolve issues.
- Strong cross-functional collaboration with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.
AI focus
Supports AI governance through framework experience, compliance reviews, and customer-facing security and AI governance guidance.
Model-written summary · the original posting is authoritative