Senior GRC Engineer
Tandem Health2 months ago
Stockholm, SwedenSenior
Responsibilities
- Build production systems that collect, validate, preserve, and monitor technical control evidence.
- Automate shared security controls and write tests to verify that controls operate as designed.
- Connect requirements, controls, implementations, tests, evidence, policies, and procedures.
- Detect missing, stale, incomplete, or failed evidence and route issues to owners with traceable records.
- Build workflows that identify drift between approved policies and technical implementations.
- Prepare reproducible evidence packages and serve as a technical subject matter expert during audits.
- Partner with security, compliance, legal, engineering, and go-to-market teams on security and compliance requirements.
- Build, deploy, and operate maintainable GRC automation with version control, testing, monitoring, and documentation.
Requirements
- Demonstrated ability to build and operate production software, automation, or data pipelines.
- Experience working with application programming interfaces, cloud services, and structured data from multiple systems.
- Ability to translate security or compliance requirements into technical controls and testable conditions.
- Ability to design evidence records with provenance, scope, collection time, and retention requirements.
- Experience building monitoring for failed collection, stale evidence, and control failures.
- Strong software engineering practices, including testing, version control, and code review.
- Ability to explain technical controls and evidence to engineers, compliance colleagues, and auditors.
- Ability to make independent engineering decisions and balance automation with access control, data minimisation, and operational safety.
- Bonus experience with ISO 27001, C5, SOC 2, controls as code, policy as code, continuous control monitoring, infrastructure as code, cloud security, identity systems, or regulated environments.
- Experience integrating compliance platforms with technical data sources or using AI for control mapping, evidence review, or policy analysis is advantageous.
- A particular degree, certification, or GRC platform is not required; demonstrated capability is valued.
Benefits
- Competitive salary and company stock options.
- 30 days of paid holiday per year.
- 5,000 SEK wellness allowance plus 6,000 SEK annually for other health-related initiatives.
- Parental leave top-up for new parents.
- Private medical insurance and mental health support through Mindler.
- Pension programme and regular social and team activities, including off-sites and seasonal events.
- Primarily based at the headquarters in central Stockholm.
- Background check conducted before hiring.
Categories
About Tandem Health
Tandem Health builds an AI medical assistant for European clinics, including an ambient scribe that transcribes consultations and generates medical notes, plus a coding assistant embedded in clinical workflows. The SaaS platform integrates with 100+ electronic health record systems and is used by 5,000+ care organizations across 10+ European markets. Headquartered in Stockholm and privately held, its products are CE‑marked under the EU MDR and certified to ISO 27001 and ISO 13485.