Senior GRC Engineer

Emergent; Bengaluru; On-site; INR 2,800,000 - 4,600,000; Full time

Job summary

Emergent is scaling a global B2C product used across 190+ countries. We are seeking a GRC Lead to build and run our compliance program spanning security, privacy, AI, and consumer protection.

You will own certifications and audits, drive GDPR and global privacy requirements, define AI governance controls, and manage policies, evidence collection, and vendor risk. Collaborate with Engineering, Security, Product and Legal to translate requirements into practical controls.

Qualifications

• 5 to 7+ years in GRC, security compliance, privacy, or risk.
• Hands-on experience with SOC 2 / ISO 27001
• Strong understanding of GDPR and global privacy
• Experience managing audits, vendors, controls, and compliance programs end to end
• Ability to work closely with Engineering, Security, Product, and Legal teams

Responsibilities

• Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
• Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
• AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
• GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
• Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

Skills

GRC expertise

Privacy compliance

Audit management

Cross-functional collaboration

Tools

SOC 2

ISO 27001

GDPR

Job description

Governance, Risk & Compliance (GRC) Lead

The Role

Emergent is scaling a global B2C product used across 190+ countries. We're looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

What You'll Own

• Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
• Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
• AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
• GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
• Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

What We're Looking For

• 5 to 7+ years in GRC, security compliance, privacy, or risk
• Hands-on experience with SOC 2 / ISO 27001
• Strong understanding of GDPR and global privacy
• Experience managing audits, vendors, controls, and compliance programs end to end
• Ability to work closely with Engineering, Security, Product, and Legal teams

What Sets You Apart

• You think in systems, not checklists
• Experience with AI governance, EU AI Act, or cloud-native products
• Comfortable building GRC programs from the ground up
• Prefer practical, scalable controls over paperwork

Why Emergent

• Build governance for AI systems that build software
• Operate at global scale across 190+ countries
• Work directly with founders and core engineering, security, and product teams
• Solve emerging challenges at the intersection of AI, security, privacy, and regulation