GRC Engineer London £110K – £200K

incident; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private medical insurance

Competitive annual leave

First Friday of every month off

Enhanced pension

Meaningful equity

Unlimited AI spend

Generous parental leave

Budget for setup: £1000; annual £500

Two budgets to invest in you: £1000/£0

Job summary

incident.io is the AI software reliability platform trusted by engineering teams at Notion, Linear, Ramp and 2,000+ companies. The GRC Engineer role focuses on turning compliance into a scalable, AI‑assisted process, from ISO 27001 work to customer security questionnaires.

You will automate evidence collection and collaborate with security, engineering and product teams to reduce audit toil. You’ll help shape governance for AI, build workflows, and communicate controls clearly to engineers and

Qualifications

• Experience running or contributing to a real compliance programme, ideally ISO 27001.
• Ability to automate evidence collection rather than chasing screenshots.
• You write code (Python, Go or similar) or build workflows, with interest in AI and agents.
• You can answer customer security questionnaires quickly, accurately and in plain English.
• You can explain a control to an engineer and a risk to an executive, with clear next steps.

Responsibilities

• Own our compliance programme, customer security questionnaires and the evidence behind both.
• Build an AI workflow that drafts questionnaire answers.
• Advance ISO 27001 work and drive improvements in GRC tooling.
• Identify and communicate what makes GRC painful to the product team.
• Scale the GRC program using AI-powered tools to reduce audit toil.
• Work closely with security, engineering, legal and product.

Skills

Compliance programme management

ISO 27001

Automation of evidence collection

Programming (Python/Go) or workflows

Security questionnaires

Effective communication of controls

AI governance awareness

Tools

Slack

Job description

A little about us

incident.io is the AI software reliability platform trusted by engineering teams at Notion, Linear, Ramp and 2,000+ companies who can't afford downtime.

The stakes are real, the talent is insane, and somehow it's a genuinely lovely place to work. We all pull our weight, go the extra mile, and put in the bit of magic most companies don't have time for, all while having fun and never taking ourselves too seriously.

We've raised $100+ million from Index Ventures, Insight Partners, and Point Nine, and we're growing fast. There's never been a better time to join.

The role in one line

Being a GRC Engineer at incident.io means turning compliance from spreadsheets and screenshots into something that just runs, so “can you prove it?” gets answered before anyone asks.

What that looks like day to day

As a GRC Engineer at incident.io, you own how we prove we’re doing the right thing: our compliance programme, our customer security questionnaires, and the evidence behind both. One day you’re building an AI workflow that drafts questionnaire answers, the next you’re pushing our ISO 27001 work forward, the next you’re telling the product team what makes GRC painful.

Our GRC programme is young, and Slack is our system of record. You’ll make it scale, using AI-powered tooling and workflows to take the toil out of audits, evidence collection and customer questions.

Right now, that means:

• ISO 27001. It’s in progress, and you’ll help raise the bar and get us over the line.
• ISO 42001. We build AI products, so we want to manage AI responsibly. In your first two quarters or so, you’ll run a gap assessment against the standard.
• Dogfooding. We use incident.io for our own security work, and you’ll drive product improvements that make GRC less painful for our customers too.

You’ll work closely with the wider security team, engineering, legal and product.

Who you are

• You’ve run or contributed to a real compliance programme, ideally ISO 27001, and you know what it takes to get through an audit.
• You’d rather automate evidence collection than chase people for screenshots.
• You write code (Python, Go or similar) or build workflows, and you’re excited about using AI and agents to remove toil.
• You can answer customer security questionnaires quickly, accurately and in plain English.
• You can explain a control to an engineer and a risk to an executive, and both come away knowing what to do next.
• You care about the product, and you’ll tell us what’s missing from our own GRC tooling.
• You’re comfortable with high autonomy. Nobody’s going to hand you a detailed spec, you’re trusted to figure out what needs doing and just do it.
• Bonus points for ISO 42001 or AI governance experience, SOC 2, GDPR, or time in a fast-growing SaaS company.

Supporting you

We work hard and we think life outside work matters just as much. Our benefits pack is built to support both.

• Private medical insurance. Seriously good cover - we want you and the people you love to be looked after.
• Competitive annual leave. Showing up at your best requires switching off, and we make sure you have time to do that.
• First Friday of every month off. Yes, seriously.
• Enhanced pension. We put real money in, because future-you deserves better than an afterthought.
• Meaningful equity. We’re rapidly scaling, and everyone who helps shape the outcome should share in it.
• Unlimited AI spend. For everyone, not just engineers. We’re all‑in on AI across the company, and we expect you to be too.
• Generous parental leave. The early days with a new baby matter more than anything we’re doing here, and we want you to be present for them.
• Two budgets that have your back. £1000 to invest in your setup, £500 a year to invest in yourself.