Security Engineer, GRC Frameworks & AI Governance

The role

You will set the standards the organization builds to, design and implement security controls, and automate compliance work. You will work with engineers, legal, product and leadership to keep AI systems audit-ready. You will also manage relationships with external auditors and regulators.

What you will do

• Carry out security compliance implementation and audits across frameworks such as SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001 and the EU AI Act
• Build and maintain compliance-as-code and continuous compliance capabilities
• Operate and extend GRC platforms such as Vanta as the system of record for controls and evidence
• Work with engineering and architecture to embed compliance requirements in design reviews
• Develop and improve corporate policies, standards and procedures
• Identify and prioritize risks related to AI/ML, cybersecurity, regulation, data privacy and cloud
• Lead risk assessments for new products, model deployments and architecture changes
• Own relationships with external auditors, assessors and regulators
• Promote a culture of security and compliance across the company
• Perform other tasks as needed to support the team and business priorities

Required qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or an engineering or STEM field
• 3+ years of experience in GRC, security compliance, or technology audit roles with hands-on GRC engineering responsibilities
• Experience implementing and maintaining security compliance frameworks in AWS, GCP or Azure
• U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee, or eligible to obtain the required authorizations from the U.S. Department of State

Nice to have

• Experience with compliance-as-code and GRC automation tools such as Vanta or Drata, with a focus on continuous monitoring
• Expert-level knowledge of several of: SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001
• Ability to evaluate control objectives against real IT and cloud configurations
• 5+ years of security compliance, GRC engineering or technology audit experience
• Hands-on experience with technical controls such as IAM, logging, encryption and CI/CD compliance checks
• Experience in tech or AI/ML, especially at startups or high-growth companies
• Working knowledge of HIPAA privacy and security rules
• Experience supporting SOX or ITGC work, especially at a public or IPO-bound company
• Understanding of AI governance frameworks such as NIST AI RMF, ISO 42001 and the EU AI Act
• Working knowledge of GDPR and CCPA

Benefits

• Equity
• Comprehensive medical coverage
• Vision coverage
• Dental coverage
• 401(k) retirement plan
• Short-term and long-term disability insurance
• Life insurance
• Various discounts and perks

Before you apply

• Applicants must be a U.S. citizen or national, U.S. lawful permanent resident, refugee under 8 U.S.C. § 1157, or asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from

About the company

SpaceX was founded to make life multiplanetary. SpaceXSI builds Super Intelligence, including Colossus supercomputers, Grok models and applications such as Grok Bot, Grok Build, Grok Imagine, Grok Voice and X.