GRC Engineer

The role

The GRC Engineer will own day-to-day GRC operations including risk assessments, compliance programs, and third party security reviews. This role involves managing the third-party risk management lifecycle and establishing automated control monitoring systems.

What you will do

• Perform risk assessments and maintain the risk register
• Drive continuous compliance programs and automate control monitoring
• Complete third party security reviews
• Manage the third-party risk management lifecycle including vendor intake and due diligence
• Establish automated control monitoring systems and continuous compliance workflows
• Administer GRC platforms such as Vanta, Anecdotes, Drata, or OneTrust
• Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF
• Maintain and update security policies and standards

Required qualifications

• Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field
• 5–8 years of experience in security GRC, risk management, or compliance program ownership
• Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor)
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting
• Strong organizational skills and ability to manage multiple priorities under tight deadlines
• Strong written and verbal communication skills with technical execution rigor

Nice to have

• Software engineering or technical background building automations for evidence collection, control validation, or audit workflows
• Experience defining security metrics/KPIs and executive reporting frameworks
• Experience completing customer security questionnaires and assurance reviews
• Exposure to automotive security and safety standards (e.g., ISO 21434, ISO 26262)

Benefits

• Base salary
• Equity in the form of options and/or restricted stock units
• Comprehensive health, dental, vision, life and disability insurance coverage
• 401k retirement benefits with employer match
• Learning and wellness stipends
• Paid time off

About the company

Applied Intuition, Inc. is a Silicon Valley company creating digital infrastructure for physical AI. It services the automotive, defense, trucking, construction, mining and agriculture industries.