GRC Engineer: Automate Audit-Ready Compliance

Taktile; Dublin; On-site; EUR 100,000 - 130,000; Full time

Benefits offered by this job

Equity

Cash compensation

Self-development budget

Home office setup

Job summary

Taktile seeks a GRC Engineer to own continuous compliance and automate controls across SOC 2, ISO 27001, GDPR, and EU AI Act. You will manage evidence collection, vendor risk, and DPAs while aligning policy with practical controls across Security, IT, and Engineering.

The role combines strong framework knowledge with hands-on scripting against AWS APIs to streamline audits and compliance reporting.

Qualifications

• 4+ years in GRC, security compliance, or audit readiness at a SaaS company, ideally in a regulated environment (Finance, Insurance, Healthcare).
• Owned SOC 2 program end-to-end (must-have), ideally ISO 27001 too, familiar with GDPR, PCI DSS, and the EU AI Act.
• Deep experience running Vanta (or Drata/Secureframe) as a continuous compliance backbone, not a point-in-time checklist.
• Technically hands-on: scripting against AWS APIs to automate evidence collection.

Responsibilities

• Own continuous compliance end-to-end; SOC 2, ISO 27001, and customer security reviews, keeping us audit-ready year-round.
• Manage and evolve the compliance roadmap, prioritizing initiatives against business and customer needs; own Vanta end-to-end, including tasks, documentation, integrations, and automated evidence collection.
• Lead quarterly access reviews across all systems in collaboration with IT and Engineering, ensuring findings are tracked through to remediation.
• Run vendor risk reviews and DPAs for new tools (especially AI tooling) and help teams adopt new software quickly without compromising our risk posture.
• Serve as the technical voice on customer security questionnaires and DPAs, working alongside Sales and Legal to keep deals moving.
• Define and report compliance and risk KPIs to leadership, giving them a clear, ongoing view of our posture and where investment is needed.
• Partner with the Security Architect to identify and close gaps between written policy and actual control implementation.

Skills

GRC experience

SOC 2

ISO 27001

GDPR/DPAs

PCI DSS

EU AI Act

Vanta/Drata

AWS scripting

Technical writing

Tools

AWS APIs

Job description

Taktile seeks a GRC Engineer to own continuous compliance and automate controls across SOC 2, ISO 27001, GDPR, and EU AI Act. You will manage evidence collection, vendor risk, and DPAs while aligning policy with practical controls across Security, IT, and Engineering.

The role combines strong framework knowledge with hands-on scripting against AWS APIs to streamline audits and compliance reporting.