AI-Driven GRC Engineer for Continuous Compliance

Treasure AI; United States; On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Comprehensive medical, dental, vision

401K with company match

RSU

Flexible Time Off

Parental leave

Job summary

Treasure AI is hiring a GRC Engineer to design, build, and operate systems powering the Trust & Assurance program. You will automate compliance, extend the GRC platform via APIs, and integrate with the security stack to embed compliance into pipelines.

You’ll work with GRC Specialists and Security, IT, Engineering, and Product teams; AI fluency is expected, and agentic tooling will accelerate outcomes across evidence, questionnaires, and executive reporting.

Qualifications

• At least 5 years in Security Engineering, DevSecOps, Technical GRC, or a closely adjacent function with a strong automation track record.
• Strong coding foundation: proficient in Python and/or TypeScript, REST APIs, JSON/YAML, webhooks, and integrations from scratch.
• Hands-on experience building automation and integrations in enterprise environments, extending systems beyond out-of-the-box features.
• Practical experience with modern GRC platforms (e.g., Vanta, Drata, Secureframe) and API-driven configurations.
• Working knowledge of SOC 2, ISO 27001/17/18, ISO 42001 and HIPAA for programmatic testability.
• Experience shipping AI-assisted automation: agent workflows, prompt pipelines, LLM-integrations, or similar.
• Familiarity with AWS security controls (IAM, CloudTrail, Config, GuardDuty) and CI/CD with IaC (Terraform), embedding checks in pipelines.
• Strong collaboration and written communication across Security, IT, Engineering, Legal/Privacy, and GTM teams.

Responsibilities

• Build AI agent workflows to automate repeatable GRC tasks using Claude, MCP integrations, or similar.
• Configure and extend the GRC platform via APIs and webhooks; architect data relationships and custom rules.
• Create automated executive readouts to render monthly/quarterly GRC reporting in a 30-minute window.
• Design and operate automated evidence collection pipelines and continuous control monitoring in real time.
• Translate controls into testable, codified checks; identify gaps in CI/CD pipelines and IaC coverage.
• Embed lightweight compliance checkpoints into design reviews and deployment pipelines.
• Support quantitative risk modeling with data pipelines and tooling to make risk computable.
• Build and maintain automation for the TPRM lifecycle: vendor intake, risk scoring, questionnaire distribution, evidence analysis, remediation tracking.
• Develop dashboards showing privileged access, access exceptions, and open remediation items for continuous view.
• Automate across customer trust surfaces, including AI-assisted questionnaire responses and trust center content management.

Skills

Security engineering

DevSecOps

Technical GRC

Automation

Python

TypeScript

REST APIs

Webhooks

CI/CD

IaC

Tools

Python

TypeScript

REST APIs

Webhooks

Jira

Confluence

Slack

Terraform

AWS

Job description

Treasure AI is hiring a GRC Engineer to design, build, and operate systems powering the Trust & Assurance program. You will automate compliance, extend the GRC platform via APIs, and integrate with the security stack to embed compliance into pipelines.

You’ll work with GRC Specialists and Security, IT, Engineering, and Product teams; AI fluency is expected, and agentic tooling will accelerate outcomes across evidence, questionnaires, and executive reporting.