Senior GRC Engineer
About The Position
As Flock scales its public safety platforms across cloud infrastructure and business operations, transforming compliance from a periodic audit exercise into a continuous, automated capability is essential. Maintaining customer trust and regulatory alignment across SOC 2, ISO, and privacy frameworks requires an engineering-driven approach to assurance. You will build scalable compliance processes, automate audit evidence collection, and embed continuous compliance frameworks directly into engineering and business workflows. This isn't a traditional manual audit or checklist management role, you will focus on engineering-driven automation, workflow platform tools, and process optimization. This is not an isolated policy-writing function, you will collaborate daily with technical and non-technical stakeholders to embed compliance directly into operational workflows. This isn't a passive advisory position, you will own audit readiness deliverables, manage customer security reviews, and build hands-on compliance tools.
Requirements
- Demonstrated experience in GRC, cybersecurity, or IT audit within SaaS or cloud environments, preferably AWS.
- Hands-on experience supporting multi-framework audits such as SOC 2 or ISO 27001, alongside managing customer security due diligence activities.
- Capability to interpret regulatory requirements and translate compliance controls into actionable engineering and operational workflows.
- Practical understanding of cloud security concepts, automation platforms, and workflow tools used to scale compliance operations.
Nice To Haves
- Relevant industry certifications such as Security+, CISA, CRISC, or ISO 27001 Internal Auditor are a plus.
Responsibilities
- Lead audit readiness and evidence management for SOC 2, ISO 27001, ISO 27701, and privacy frameworks using an automation-first approach.
- Architect and deploy automated workflows to transform point-in-time audits into continuous compliance monitoring capabilities across cloud and SaaS systems.
- Manage customer assurance requests, security questionnaires, and due diligence activities to maintain customer trust and accelerate business operations.
- Partner with Engineering, Security, Legal, Privacy, and Product teams to integrate compliance controls directly into software development and operational processes.
- Maintain and update security policies, controls, and compliance documentation to align with evolving regulatory requirements.
Benefits
- Flock Stock Options
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
