GRC Engineer

Replit

GRC Engineer at Replit, architecting systems for compliance and risk management. Driving automation and collaboration across security, privacy, and engineering teams.

Posted 5/13/2026full-timeFoster City • California • 🇺🇸 United StatesSeniorLead💰 $210,000 - $320,000 per yearWebsite

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Act as a technical subject matter expert for the GRC team
Own the technical vision for Replit’s GRC program
Champion a culture of security and privacy across the company
Partner with Architects and Engineering Leads to "bake in" compliance requirements
Work closely with Legal Counsel to interpret and implement requirements for Privacy (GDPR, CCPA)
Manage and evolve our compliance posture across SOC 2, ISO 27001
Drive the shift from manual evidence collection to continuous monitoring
Architect a scalable framework for assessing third-party vendors and AI model providers

Requirements

What you’ll need

8+ years of experience in GRC or Information Security
Technical Fluency: Ability to speak the language of engineering, cloud (GCP/AWS), and security architecture
Regulatory Breadth: Deep experience with SOC 2, ISO 27001, PCI, HIPAA, and Privacy laws
Collaborative Communication: Strong ability to explain risk and tradeoffs to technical (Engineers), legal, and commercial (Sales/Execs) stakeholders
Automation Mindset: Experience with GRC automation tools (e.g., Vanta, Drata) and a bias toward reducing manual toil.

Benefits

Comp & perks

Competitive Salary & Equity
401(k) Program with a 4% match
Health, Dental, Vision and Life Insurance
Short Term and Long Term Disability
Paid Parental, Medical, Caregiver Leave
Commuter Benefits
Monthly Wellness Stipend
Autonomous Work Environment
In Office Set-Up Reimbursement
Flexible Time Off (FTO) + Holidays
Quarterly Team Gatherings
In Office Amenities