GRC Engineer

Applied Intuition•Sunnyvale, CA

15h•Onsite

About The Position

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co . We are an in-office company, and our expectation is that full-time employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. This in-office expectation does not apply to contractor positions

Requirements

Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.
5–8 years of experience in security GRC, risk management, or compliance program ownership.
Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor)
Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting.
Strong organizational skills and ability to manage multiple priorities under tight deadlines.
Strong written and verbal communication skills with technical execution rigor.
Deep hands-on experience with major security and privacy frameworks such as ISO42001, NIST AI RMF, ISO27001/17/18, TISAX, SOC 2 or NIST CSF

Nice To Haves

Software engineering or technical background building automations for evidence collection, control validation, or audit workflows.
Experience defining security metrics/KPIs and executive reporting frameworks.
Experience completing customer security questionnaires and assurance reviews.
Exposure to automotive security and safety standards (e.g., ISO 21434, ISO 26262).

Responsibilities

Own day-to-day GRC operations - including (but not limited to) performing risk assessments, driving continuous compliance programs, automating control monitoring and evidence collection, and completing third party security reviews
Perform and improve security risk assessments, maintain the risk register, partner with risk owners to drive risk remediation and mitigation
Own the third-party risk management lifecycle, including vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation.
Improve the efficiency and consistency of vendor assessments through standardized workflows, automation, and risk-based review processes
Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness and work with control owners towards continuously strengthening security posture
Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and scalability
Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements to practical controls, assessments, and evidence
Maintain and update security policies and standards aligned with industry best practices