Security Engineer - GRC Sales

xAI•Palo Alto, NY

About The Position

SpaceXSI is seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional focused on third-party risk management and customer trust. The role combines cybersecurity GRC, vendor management, and sales enablement. The Security Engineer will act as a security-minded presales partner, develop sufficient knowledge of SpaceXSI’s technical environment to complete customer security assessments accurately, participate in customer meetings as a security and compliance subject matter expert, and help operate third-party risk and vendor management processes. The role requires understanding how AI/LLMs, CI/CD, identity and access management, DevOps, DevSecOps, Kubernetes, and IT/AI governance function in production, and translating that knowledge into clear, credible responses for enterprise customers. Additional responsibilities may be assigned as needed to support the team and evolving business priorities.

Requirements

Bachelor’s degree in computer science, Information Security, Cybersecurity, or an engineering/STEM field.
At least 5 years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities.
Demonstrated experience completing or owning customer vendor security questionnaires and participating in enterprise-buyer security due-diligence discussions.
Working technical fluency in several of the following: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments such as AWS, GCP, or Azure.
Solid understanding of common customer-assurance security and compliance frameworks, such as SOC 2, ISO 27001, and NIST CSF, and how controls map to questionnaire language.
Strong written and verbal communication skills, including the ability to explain cybersecurity and GRC concepts to sales, customer, legal, and engineering audiences.

Nice To Haves

7 or more years of cybersecurity, GRC, third-party risk, or customer trust/security assurance experience.
Prior experience in presales security, security solutions engineering, customer trust, or sales-enablement GRC at a technology, cloud, or AI company.
Hands-on or closely related experience with vendor risk management programs, including onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting.
Familiarity with AI governance topics relevant to customer diligence, such as model data handling, prompt/output controls, training-data boundaries, ISO 42001, NIST AI RMF, or the EU AI Act.
Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta or Drata.
Ability to read architecture diagrams, IAM models, and high-level pipeline/Kubernetes designs and turn them into accurate, accessible customer narratives.
Comfort working in fast-moving deal cycles while protecting accuracy and knowing when to confirm details with engineering.
Working knowledge of data privacy frameworks such as GDPR and CCPA in enterprise security and vendor assessments.
Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar.
Experience supporting public-sector, financial-services, or other highly regulated customer diligence processes.

Responsibilities

Support the sales organization as a cybersecurity/GRC presales partner by attending customer and prospect meetings, presenting the company’s security and compliance posture, and accurately answering technical and control-related questions.
Own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests; maintain a reusable knowledge base of control narratives based on SpaceXSI’s actual operations.
Build and maintain working fluency in SpaceXSI’s AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and IT and AI governance, escalating to engineering when appropriate.
Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve.
Translate customer security requirements into actionable internal requests and help distinguish necessary contractual or control commitments from unreasonable or out-of-scope demands.
Contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.
Coordinate with GRC and security teams on overlapping frameworks and evidence, including SOC 2, ISO 27001, ISO 42001, and privacy commitments, to keep external answers consistent with internal controls and GRC tooling such as Vanta.
Identify recurring questionnaire themes and deal blockers and relay insights to product, engineering, and GRC roadmaps to reduce friction over time.
Prepare and present concise status updates on questionnaire volume, deal-impacting security requests, vendor risk posture, and customer assurance themes to sales leadership and GRC stakeholders.
Promote clear and honest customer communication about security practices, AI and infrastructure governance, and risk scope.
Take on additional tasks and responsibilities as needed to support the team and evolving business priorities.