GRC Automation Engineer: Continuous Compliance

Plaid; Seattle (WA); On-site; USD 156,000 - 213,600; Full time

Benefits offered by this job

Equity

401(k)

Job summary

Plaid is seeking a GRC Engineer to build and scale the GRC function from the ground up. You will define architecture, codified controls, and automated evidence pipelines that support continuous compliance across SOC 2, ISO, and NIST frameworks.

You will automate control testing, develop real-time risk dashboards, and drive data-driven risk assessments while reducing manual toil through durable automation and AI-assisted workflows.

Qualifications

• Experience building continuous controls monitoring end to end.
• Ability to model controls, policies, and framework mappings as structured data.
• Hands-on IaC and policy-as-code, embedding checks into CI/CD.

Responsibilities

• Architect GRC's Engineering Foundation: codified data and controls mapping across frameworks.
• Build Continuous Controls Monitoring: automate evidence collection, testing and monitoring.
• Turn data into risk signals with dashboards and KPI reporting.
• Drive data-informed risk assessments and mitigations.
• Automate operational toil with durable automation.
• Shift compliance left with code and AI in the SDLC.
• Move toward machine-readable, continuously validated evidence.

Skills

Python

SQL

API/webhook integrations

Internal tool ownership

AWS

Dashboarding / data-visualization

Education

Bachelor's degree in CS or related field

Tools

Terraform

OPA/Rego

Sentinel

Mode

Job description

Plaid is seeking a GRC Engineer to build and scale the GRC function from the ground up. You will define architecture, codified controls, and automated evidence pipelines that support continuous compliance across SOC 2, ISO, and NIST frameworks.

You will automate control testing, develop real-time risk dashboards, and drive data-driven risk assessments while reducing manual toil through durable automation and AI-assisted workflows.