Senior Risk & Governance Engineer
AlphaSense2 months ago
India (city not specified)Senior
Responsibilities
- Design and maintain automated compliance testing pipelines that continuously validate controls across cloud, SaaS, and internal systems.
- Build GRC platform integrations, API-based evidence connectors, and workflow automation for platforms such as Drata or equivalent.
- Develop AI-assisted workflows for evidence summarization, control narratives, risk analysis, vendor questionnaire triage, and policy gap detection.
- Own governance policies, controls, and compliance architecture for AI and agentic systems.
- Implement policy-as-code, common controls, continuous control monitoring, observability, alerting, and remediation runbooks.
- Integrate GRC tooling with SIEM, EDR, CSPM, identity, and vulnerability-management platforms.
- Support external audits, maintain automated audit evidence, and document GRC automation for non-engineering users.
Requirements
- At least 6 years of experience in GRC, information security, risk management, IT audit, security engineering, DevSecOps, GRC tooling, or compliance automation.
- Strong knowledge of SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls, with working knowledge of ISO 42001 and NIST AI RMF.
- Hands-on experience implementing automated control collection, continuous control monitoring, cloud evidence collection, and GRC platform API integrations.
- Proficiency with GRC platforms such as Drata, Vanta, AuditBoard, or ServiceNow GRC.
- Familiarity with AWS, Azure, or GCP and related security and compliance posture tooling.
- Coding ability in Python or an equivalent language to build API integrations, scheduled jobs, and deployable pipelines.
- Experience with external audits, evidence collection, control walkthroughs, auditor interaction, risk registers, control libraries, and policy governance.
- Experience with version control, GitHub Actions or equivalent CI/CD practices, and infrastructure-as-code concepts.
- Preferred qualifications include CISA, CRISC, CISM, CISSP, CCSK, or ISO 27001 Lead Auditor/Implementer certification; AI governance, SOX ITGC, privacy compliance, SOAR, agentic orchestration, policy-as-code, detection engineering, or AI governance implementation experience.
Tech Stack
Categories
About AlphaSense
AlphaSense builds an AI-powered market intelligence and search platform used by investment, corporate strategy, and research teams to find insights across public and private content (equity research, filings, transcripts, expert calls, news, and internal documents). It sells enterprise subscriptions to its SaaS platform and content sets. Founded in 2011 and headquartered in New York, the company is privately held and acquired Tegus in 2024; its customers include a majority of the S&P 500.