Staff GRC Engineer

This is a fully remote position, open to applicants in Massachusetts.

📋 Description

• Oversee the advancement of control program maturity.

• Develop ongoing control monitoring and automation processes.

• Enhance data security policy and program standards.

• Propel improvements in operational quality.

• Lead by influencing and applying systems thinking.

⛳️ Requirements

• Minimum of 8 years of experience in security governance, risk management, compliance, or security program roles within a SaaS or cloud-native setting, including significant responsibility for control design, testing, and program enhancement.

• Extensive knowledge of security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS, with the ability to convert framework requirements into functional controls applicable in real-world systems and teams.

• Proven capability to automate or instrument aspects of a compliance or assurance program using scripting, APIs, dashboards, platform configurations, or other technical strategies.

• Experience in implementing engineering system guardrails to ensure compliance through Policy-as-Code (Terraform) or secure configurations of platform systems in cloud-hosted environments (AWS, GitHub, etc.).

• Background in developing or enhancing data security governance, classification, handling rules, or related control practices across business systems, data platforms, or collaborative environments.

• Knowledge of governing and securing AI/Agentic systems and business processes.

• Exceptional written communication and cross-functional influence abilities, capable of articulating controls, trade-offs, and program expectations to both technical and non-technical stakeholders.

• Ability to work closely with engineers and technical teams to design controls as code, configuration, workflows, or monitoring rather than relying solely on policy documents and manual checklists.

• Strong systems thinker who can deconstruct ambiguous governance challenges into actionable operating models, measurable results, and implementation steps.

• Comfortable balancing strategic design initiatives with operational execution when the program requires direct hands-on involvement.

• A proactive individual who enhances process quality, identifies inter-team gaps, and drives the adoption of improved working methods.

• Familiar with utilizing AI tools and automated workflows to boost scalability and efficiency.

🏝️ Benefits

• Competitive market salary.

• Stock options that you will help increase in value.

• 12 paid holidays.

• Flexible paid time off (PTO).

• 401K with ezCater matching contributions.

• Health, dental, and flexible spending account (FSA) options.

• Long-term disability insurance.

• Resources for mental health and family planning.

• Option for remote-hybrid work from our fantastic Boston office, your home, or a combination of both.

• A significant amount of responsibility and autonomy.

• Great co-workers.

• Employee meal program and many additional perks when working from our office.