Governance, Risk, and Compliance Engineer

ClickHouse

1d • Remote

About The Position

Recognized on the 2025 Forbes Cloud 100 list, ClickHouse is one of the most innovative and fast-growing private cloud companies. With over 2,000 customers and ARR that has more than quadrupled over the past year, ClickHouse leads the market in real-time analytics, data warehousing, observability, and AI workloads. ClickHouse’s incredible momentum was confirmed in its recent $350M Series C financing that included new, tier one investors, Khosla Ventures, BOND, IVP, Battery Ventures and Bessemer Venture Partners. We’re on a mission to transform how companies use data. Come be a part of our journey!
The Governance, Risk, and Compliance (GRC) team plays a critical role in enabling trust for our customers by designing, implementing, and maintaining compliance programs for a modern database-as-a-service platform used across a wide range of regulated industries.
The team is responsible for deeply understanding applicable compliance frameworks, translating requirements into practical, scalable controls, and partnering across the company to embed compliance into our products, systems, and day-to-day operations.
This is a highly hands-on role with broad ownership and real impact. You’ll have the opportunity to apply your expertise directly, influence technical and business decisions, and grow alongside a fast-moving organization as our compliance and security programs continue to evolve.

Requirements

• 7+ years of experience in IT Audit, Governance, Risk & Compliance, and/or Information Security.
• Bachelor’s degree in Computer Science, Information Technology, Information Systems Management, or equivalent practical experience.
• One or more relevant certifications such as CISA, PCI-P, CIPP, or equivalent.
• Strong working knowledge of major security and privacy frameworks, with hands-on experience interpreting and implementing controls in a cloud-based environment.
• Demonstrated experience using and administering GRC and security tooling.
• Excellent written and verbal communication skills, with the ability to collaborate effectively across technical and non-technical teams.
• Strong problem-solving mindset with the ability to balance risk, business needs, and scalability.
• Comfortable operating in a fast-paced, high-growth environment and acting as a trusted partner to the business.
• High level of ownership, accountability, and attention to detail.
• Ability to learn quickly, adapt to change, and take on additional responsibilities as needed.

Nice To Haves

• Experience with database technologies or data-intensive platforms.
• Hands-on coding or scripting experience (e.g., automation, tooling, or security-related development).
• Experience building or scaling GRC programs in a startup or high-growth SaaS environment.

Responsibilities

• Partner cross-functionally to design, implement, and maintain compliance programs, including SOC 2, ISO 27001 / 27701, PCI-DSS, HIPAA, GDPR, FedRAMP, and others as needed.
• Collaborate closely with Engineering to review and validate compliance-relevant product and infrastructure changes, including hands-on testing and documentation development.
• Execute ongoing compliance operations, including: Employee security onboarding and training Third-party/vendor risk assessments Customer security questionnaires and audits Quarterly access reviews, ASV scans, and risk assessment refreshes
• Support and enhance access governance programs in partnership with Operations, including Okta and ConductorOne onboarding, configuration, and reviews.
• Work with Marketing, Privacy and Legal to support privacy tooling, data protection initiatives, and regulatory requirements.
• Coordinate with the Security team to maintain and improve corporate security tooling, controls, and operational processes.
• Contribute to continuous improvement of GRC processes, automation, and tooling to scale with the business.

Benefits

• Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in 20 countries.
• Healthcare - Employer contributions towards your healthcare.
• Equity in the company - Every new team member who joins our company receives stock options.
• Time off - Flexible time off in the US, generous entitlement in other countries.
• A $500 Home office setup if you’re a remote employee.
• Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 251-500 employees