Governance, Risk, and Compliance Engineer

Jobgether

1d • $131,000 - $205,000 • Remote

About The Position

This role offers an exciting opportunity to shape and maintain compliance programs for a high-growth, cloud-based data platform. The Governance, Risk, and Compliance (GRC) Engineer will partner across engineering, operations, security, legal, and product teams to ensure adherence to key frameworks such as SOC 2, ISO 27001/27701, PCI-DSS, HIPAA, GDPR, and FedRAMP. This position combines hands-on technical work, including testing and control implementation, with strategic influence on risk and compliance processes. You will have ownership of compliance operations, third-party risk, access governance, and privacy initiatives while helping scale GRC programs in a fast-moving, innovative environment. The role requires proactive problem-solving, strong collaboration, and the ability to balance risk management with business priorities. Your contributions will directly enhance trust and security across customer-facing products and internal operations.

Requirements

• 7+ years of experience in IT Audit, Governance, Risk & Compliance, or Information Security.
• Bachelor’s degree in Computer Science, Information Technology, Information Systems Management, or equivalent practical experience.
• Relevant certifications such as CISA, PCI-P, or CIPP are preferred.
• Strong working knowledge of security and privacy frameworks, with hands-on experience implementing controls in cloud environments.
• Experience using and administering GRC and security tools.
• Excellent communication skills, with the ability to collaborate across technical and non-technical teams.
• Strong problem-solving mindset, balancing risk, business needs, and scalability.
• Comfort operating in a high-growth, fast-paced environment with high ownership and accountability.
• Ability to learn quickly, adapt to change, and take on additional responsibilities as needed.

Nice To Haves

• experience with database or data-intensive platforms
• coding/scripting experience for automation
• scaling GRC programs in a SaaS environment

Responsibilities

• Design, implement, and maintain enterprise compliance programs across multiple frameworks, ensuring controls are practical and scalable.
• Partner with engineering and operations teams to validate compliance-relevant product and infrastructure changes, including hands-on testing and documentation.
• Execute ongoing compliance operations: employee security onboarding and training, third-party/vendor risk assessments, customer security questionnaires, audits, and quarterly access reviews.
• Support access governance programs, including onboarding, configuration, and periodic reviews for identity management tools.
• Collaborate with legal, privacy, and marketing teams to implement data protection initiatives and regulatory requirements.
• Coordinate with security teams to enhance corporate security tooling, processes, and operational controls.
• Drive continuous improvement and automation of GRC processes to scale with business growth.

Benefits

• Competitive salary range: $131,000–$205,000 USD (premium markets $151,000–$224,000 USD).
• Flexible remote work environment with global distribution.
• Employer contributions to healthcare coverage.
• Equity options in the company.
• Flexible time off and generous leave policies.
• $500 home office setup for remote employees.
• Opportunities to participate in global company gatherings and offsites.
• Be part of shaping company culture as an early team member.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 11-50 employees