Senior Software Engineer - GRC

Emergent; Bengaluru; On-site; INR 2,500,000 - 5,000,000; Full time

Job summary

Emergent is building AI-powered software production systems used globally and seeks a GRC Lead to own security, privacy, and compliance programs across regulatory regimes. You will lead certifications, audits, and governance for AI-driven product safety and data protection while collaborating with engineering, product, legal, and security teams.

The role focuses on scalable controls, risk reduction, and regulatory readiness, enabling secure, compliant growth across 190+ countries.

Qualifications

• 5–7+ years in GRC, security compliance, privacy or risk.
• Hands-on with SOC 2 and ISO 27001.
• Strong knowledge of GDPR and global privacy regulations.
• Experience leading audits, vendor management and end-to-end programs.
• Ability to partner with Engineering, Security, Product and Legal.

Responsibilities

• Own SOC 2, ISO 27001 certifications from readiness through audit.
• Drive GDPR and global privacy compliance, including data residency and DSARs.
• Define AI governance controls for EU AI Act and related needs.
• Own GRC program policies, controls, evidence collection and audit readiness.
• Partner with engineering to translate compliance into scalable controls.

Skills

GRC Experience

Security Compliance

Privacy

Audit Management

Vendor Management

Engineering Collaboration

Job description

Job Description:

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.

Since our public launch, weve crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. Were backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.

Were solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from Google, Amazon, and Dropbox.

We're hiring builders who want ownership, speed, and impact at global scale.

Governance, Risk & Compliance (GRC) Lead

The Role

Emergent is scaling a global B2C product used across 190+ countries. We’re looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

What You’ll Own

• Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
• Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
• AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
• GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
• Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

What We’re Looking For

• 5 to 7+ years inGRC, security compliance, privacy, or risk
• Hands-on experience with SOC 2 / ISO 27001
• Strong understanding of GDPR and global privacy
• Experience managing audits, vendors, controls, and compliance programs end to end
• Ability to work closely with Engineering, Security, Product, and Legal teams

What Sets You Apart

• You think in systems, not checklists
• Experience with AI governance, EU AI Act, or cloud-native products
• Comfortable building GRC programs from the ground up
• Prefer practical, scalable controls over paperwork

Why Emergent

• Build governance for AI systems that build software
• Operate at global scale across 190+ countries
• Work directly with founders and core engineering, security, and product teams
• Solve emerging challenges at the intersection of AI, security, privacy, and regulation

Requirements: