Senior GRC Engineer

The role

The GRC Lead will build and run a compliance program across security, privacy, AI, and consumer protection. This role involves owning certifications, driving privacy requirements, and defining AI governance controls.

What you will do

• Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal
• Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing
• Define controls for emerging AI regulations, including the EU AI Act
• Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness
• Translate compliance requirements into practical, scalable controls for engineering teams

Required qualifications

• 5 to 7+ years in GRC, security compliance, privacy, or risk
• Hands-on experience with SOC 2 / ISO 27001
• Strong understanding of GDPR and global privacy
• Experience managing audits, vendors, controls, and compliance programs end to end
• Ability to work closely with Engineering, Security, Product, and Legal teams

Nice to have

• You think in systems, not checklists
• Experience with AI governance, EU AI Act, or cloud-native products
• Comfortable building GRC programs from the ground up
• Prefer practical, scalable controls over paperwork

About the company

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. The company has crossed $130M in ARR and is backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.