GRC Engineer

The role

You will own the compliance programme, customer security questionnaires, and the evidence behind both. You will use AI-powered tooling and workflows to scale the GRC programme and drive product improvements.

What you will do

• Own the compliance programme, customer security questionnaires, and the evidence behind both.
• Build AI workflows that draft questionnaire answers.
• Push ISO 27001 work forward.
• Run a gap assessment against ISO 42001 in the first two quarters.
• Drive product improvements for GRC tooling.
• Work closely with the security team, engineering, legal and product.

Required qualifications

• Run or contribute to a real compliance programme.
• Write code (Python, Go or similar) or build workflows.
• Answer customer security questionnaires quickly, accurately and in plain English.
• Explain a control to an engineer and a risk to an executive.
• Comfortable with high autonomy.

Nice to have

• ISO 27001 experience
• ISO 42001 or AI governance experience
• SOC 2
• GDPR
• Time in a fast-growing SaaS company

Benefits

• Private medical insurance
• Competitive annual leave
• First Friday of every month off
• Enhanced pension
• Meaningful equity
• Unlimited AI spend
• Generous parental leave
• £1000 to invest in your setup
• £500 a year to invest in yourself

About the company

incident.io is the AI software reliability platform trusted by engineering teams at Notion, Linear, Ramp and 2,000+ companies. They have raised $100+ million from Index Ventures, Insight Partners, and Point Nine.