Security Engineer, GRC

The role

You will own GRC Engineering at Plaid by building an engineered system for continuous, data-driven compliance. You will architect the foundation for controls, policies, and evidence using live pipelines and automated monitoring.

What you will do

• Architect GRC's Engineering Foundation using structured, version-controlled data.
• Build Continuous Controls Monitoring to automate evidence collection and testing.
• Turn Data into Risk Signal through dashboards and SQL-driven reporting.
• Drive Data-Informed Risk Assessments and recommend mitigations.
• Automate Operational Toil like evidence pulls, access reviews, and questionnaires.
• Shift Compliance Left with Code and AI by embedding checks into CI/CD flows.
• Build toward machine-readable, continuously validated evidence for future-proofing.

Required qualifications

• Strong Python and SQL.
• Proven track record of building API/webhook integrations.
• Experience owning an internal tool or service end to end.
• Hands-on experience with AWS and cloud-native security controls.
• Ability to query cloud, GitHub, and SaaS logs.
• Proficiency with dashboarding / data-visualization tools (e.g., Mode).
• Experience building and operating continuous controls monitoring end to end.
• Ability to model controls, policies, and framework mappings as structured, version-controlled data.
• Hands-on experience with IaC (Terraform) and policy-as-code (OPA/Rego, Sentinel).
• Working knowledge of SOC 2, ISO 27001/27701, and NIST CSF/800-53.
• Experience conducting security or technology risk assessments.
• Demonstrated ability to build and scale agentic / AI-assisted workflows (Claude, OpenAI).

Nice to have

• Direct experience with FedRAMP or FedRAMP 20x, or other public-sector / continuous-compliance authorizations.
• Experience with audit / compliance automation platforms (Anecdotes, Drata, Vanta, Paramify, or similar).
• Exposure to security incident response and triage.
• Experience in a high-growth fintech or financial-services environment.
• Degree in Computer Science, Cybersecurity, or a related field.

Benefits

• Medical
• Dental
• Vision
• 401(k)

About the company

Plaid powers the tools millions of people rely on to live a healthier financial life. The company works with thousands of companies to connect financial accounts to apps and services.