AI-First Senior GRC Engineer — Hybrid in Raleigh

Pendo; Raleigh (NC); Hybrid; USD 133.000 - 160.000; Vollzeit

Benefits dieser Stelle

Hybrid work 3 days per week

Competitive benefits

401(k) match

Equity

Zusammenfassung

Pendo is seeking a Sr. GRC Engineer to lead complex governance, risk, and compliance initiatives from our Raleigh office.

You will drive AI-enabled assurance, define security roadmaps, own multiple compliance programs, and guide cross-functional teams in embedding security into daily operations. You will manage incident response, translate risk into business terms for executive decisions, and partner with engineering and product to ensure durable controls across SOC 2, ISO 27001, PCI-DSS,

Qualifikationen

• 3 to 5 years of hands-on security experience with ownership of compliance programs or security operations.
• Deep working knowledge of SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, or the NIST 800-series.
• Ability to independently own auditor relationships and manage an audit cycle end-to-end, including responding directly to auditor questions.
• Experience leading incident response investigations from triage through root cause analysis and producing post-incident documentation that engineering teams can act on.
• Demonstrated ability to translate security risk into business-risk language that enables leaders to make investment and prioritization decisions.
• Active, demonstrated use of AI tools to accelerate security workflows such as evidence collection, policy drafting, regulatory research, or detection analysis.
• Strong written and verbal communication skills, with the ability to tailor recommendations effectively for engineering, auditor, and leadership audiences.

Aufgaben

• AI-driven compliance and operations acceleration: Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research.
• Security program strategy and roadmap: Identify maturity gaps across compliance and security operations and translate them into prioritized roadmap recommendations grounded in business risk.
• Compliance program ownership: Own one or more regulatory compliance programs end-to-end, including SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP.
• Risk assessment and prioritization: Conduct organizational risk assessments and present findings to leadership with clear prioritization and investment-level recommendations.
• Incident response leadership: Lead incident response for complex, multi-system security events from investigation through resolution.
• Cross-functional partnership: Work directly with engineering, product, and IT teams to deliver compliance requirements, validate implementations, and embed security into day-to-day operations.

Kenntnisse

Security operations

Compliance programs

Incident response

Risk translation to business

AI tooling usage

Written and verbal communication

Tools

Splunk

Elastic

CrowdStrike

SentinelOne

GRC platforms (Vanta, Drata, Archer)

Jobbeschreibung

Pendo is seeking a Sr. GRC Engineer to lead complex governance, risk, and compliance initiatives from our Raleigh office.

You will drive AI-enabled assurance, define security roadmaps, own multiple compliance programs, and guide cross-functional teams in embedding security into daily operations. You will manage incident response, translate risk into business terms for executive decisions, and partner with engineering and product to ensure durable controls across SOC 2, ISO 27001, PCI-DSS,