Security Engineer, GRC

Writer

full-time

Posted on: 8/16/2025

Location: California • 🇺🇸 United States

✨ AI Apply

SeniorLead

Cloud

About the role

Lead AI regulatory compliance — Research global AI regulations, develop compliance strategies, and align AI development with transparency, fairness, and safety requirements.
Own compliance programs — Manage SOC2, ISO 27001/27701/42001, GDPR, HIPAA, SOX readiness, and FedRAMP strategies.
Drive enterprise risk management — Design frameworks for assessing and mitigating AI-specific and enterprise-wide risks.
Manage third-party risk — Build vendor risk programs for AI/ML suppliers, cloud providers, and data processors.
Champion data privacy — Lead privacy programs for AI training data and user information, ensuring compliance with GDPR, CCPA, and emerging laws.
Coordinate audits and certifications — Oversee internal and external audits, evidence collection, and resolution of findings with minimal disruption.
Enable compliance through partnership — Define requirements and collaborate with security, engineering, and legal teams to implement controls.

8+ years in governance, risk, and compliance for technology companies.
5+ years managing compliance programs (SOC2 and ISO certifications required).
Proven experience in emerging technology compliance, ideally AI/ML governance.
Deep expertise in global privacy regulations and implementation.
Strong program and stakeholder management skills.
Expert in security frameworks (SOC2, ISO, NIST, GDPR, HIPAA, FedRAMP).
Understanding of AI/ML technologies and their unique risk profiles.
Proficiency with GRC platforms, automation tools, and risk assessment methods.
Knowledge of cloud security compliance requirements.
Experience with data governance, classification, and privacy-by-design.
Track record of building compliance programs from the ground up.
History of passing audits with minimal findings.
Proven ability to translate regulations into actionable, business-aligned programs.
Strong analytical approach to risk and compliance metrics.
Experience with AI governance frameworks.
Background in technology or engineering.
Certifications such as CISA, CRISC, CIPP.
Experience with public company compliance requirements.
Knowledge of international data transfer mechanisms.