3 months ago
Base Salary
$156k - $214k/yr
Responsibilities
- Architect and build the GRC Engineering foundation with structured, version-controlled controls, policies, framework mappings, and evidence pipelines.
- Automate continuous controls monitoring, evidence collection, control testing, drift detection, misconfiguration detection, alerting, and remediation workflows.
- Build dashboards and SQL-driven reporting that convert control and risk data into KPIs and real-time risk signals.
- Conduct security and technology risk assessments and recommend data-driven mitigations.
- Automate evidence pulls, access and vendor reviews, questionnaires, risk-register maintenance, and status reporting.
- Embed compliance checks into CI/CD using policy-as-code, prototype self-healing policies, and scale agentic or AI-assisted workflows.
- Develop machine-readable, continuously validated evidence and support FedRAMP 20x-style continuous compliance.
Requirements
- Strong Python and SQL skills with experience building API and webhook integrations across disparate systems.
- Experience owning an internal tool or service end to end, including design, development, operation, and maintenance.
- Hands-on experience with AWS, cloud-native security controls, and querying cloud, GitHub, and SaaS logs.
- Proficiency with dashboarding or data-visualization tools such as Mode.
- Experience building and operating continuous controls monitoring, including signal collection, detection logic, alerting, and remediation.
- Experience modeling controls, policies, and framework mappings as structured, version-controlled data.
- Hands-on experience with Terraform, OPA/Rego, and Sentinel, including embedding compliance checks into CI/CD.
- Experience automating recurring GRC operations such as evidence collection, access and vendor reviews, questionnaires, risk-register upkeep, and status reporting.
- Working knowledge of SOC 2, ISO 27001/27701, and NIST CSF/800-53.
- Experience conducting security or technology risk assessments and translating findings into data-driven mitigation.
- Familiarity with FedRAMP 20x, machine-readable Key Security Indicators, and continuous compliance.
- Ability to build and scale agentic or AI-assisted workflows using Claude and OpenAI.
- Ability to work independently and cross-functionally across security, infrastructure, and engineering.
- Preferred qualifications include FedRAMP or FedRAMP 20x experience, experience with compliance automation platforms, exposure to security incident response and triage, and experience in fintech or financial services.
- A degree in Computer Science, Cybersecurity, or a related field is nice to have.
Benefits
- Plaid provides medical, dental, vision, and 401(k) benefits.
- Additional compensation may include equity and/or commission, depending on the position offered.
- Pay and benefits vary based on factors including scope, responsibilities, experience, skill set, and location, and may change over time.
About Plaid
Plaid builds APIs and SDKs that let developers and financial institutions connect consumer bank and investment accounts, verify ownership, retrieve transactions, assess income/liabilities, fight fraud, and move money (e.g., ACH/transfer). It sells usage-based access to products like Link, Auth, Transactions, Identity, Income, Liabilities, and Payments. Founded in 2013 and headquartered in San Francisco, Plaid’s network spans 12,000+ financial institutions across the US, Canada, the UK, and Europe, with customers including Venmo, SoFi, and Betterment.