GRC Automation Engineer

25 days ago

Remote, United StatesMid Level / Senior

Base Salary

$104k - $123k/yr

Responsibilities

Build automations for evidence collection, control validation, audit preparation, POA&M tracking, continuous monitoring, reporting, and task management.
Automate third-party security reviews for procurement and recurring assessments, including reviews affecting FedRAMP, CJIS, HIPAA, PCI, and IP.
Use AI-enabled tools, AI agents, low-code/no-code platforms, scripts, APIs, and integrations to streamline compliance workflows.
Design, test, optimize, and evaluate AI-assisted workflows, prompts, and emerging AI technologies for GRC use cases.
Assess automations for security, privacy, regulatory compliance, auditability, and alignment with AI governance standards.
Use AI-assisted analysis to identify trends, risks, control gaps, and remediation opportunities.
Partner with Security, Engineering, Product, IT, Legal, and business teams to document processes and translate requirements into automated workflows.
Support automation across FedRAMP, CJIS, ISO 27001, ISO 42001, SOC 2, PCI, HIPAA, FISMA, and CyberEssentials.
Support the transition from FedRAMP rev5 legacy reporting and auditing requirements to Consolidated New Rules and 20.x.
Develop dashboards, metrics, and repeatable reporting covering compliance status, control health, audit readiness, risks, gaps, and remediation progress.

3–6 years of related experience in development roles.
Hands-on experience evaluating and applying AI tools, agents, or automation technologies to business or operational challenges.
Hands-on experience identifying automation opportunities and building solutions.
Curiosity and continuous learning regarding emerging AI capabilities and their application to security and compliance.
Strong communication skills with team members and customers.
Adaptability in a fast-paced, dynamic environment and the ability to meet deadlines without compromising accuracy.
No degree is required for most roles; candidates are encouraged to apply even if they do not meet every listed requirement.

Remote-first work arrangement with a globally distributed workforce.
Flexible time off and company-wide wellbeing days.
Work-from-home reimbursement.
Multiple health plan options, including a 100% employer-paid plan, plus employer HSA contributions when enrolled in a high-deductible plan.
Fitness reimbursement and on-demand mental health support, including Headspace and other wellness tools.
Paid parental leave for birthing and non-birthing parents.
Traditional and Roth 401(k) with a company match.
100% employer-paid life and AD&D insurance.
Online learning platforms and company employee resource groups.
Competitive salary and bonuses.

1,001-5,000 employees