GRC Engineer — AI-Driven, Continuous Compliance

Plaid; Seattle (WA); On-site; USD 180,000 - 240,000; Full time

Job summary

Plaid is building an engineered, continuous-compliance platform. You will architect the GRC foundation, codify controls, and enable real-time risk signals across security, risk, and engineering teams.

You will automate evidence collection, implement continuous controls monitoring, and turn data into KPI dashboards. This role blends software engineering with governance to drive scalable, auditable compliance.

Qualifications

• Strong Python and SQL, with a proven track record of building API/webhook integrations that connect disparate systems.
• Experience owning an internal tool or service end to end — design, build, operate, and maintain — with real users depending on it.
• Hands-on experience with AWS and cloud-native security controls, including the ability to query cloud, GitHub, and SaaS logs.
• Proficiency with dashboarding / data-visualization tools (e.g., Mode) to turn control and risk data into KPIs and signal.
• Demonstrated ability to model controls, policies, and framework mappings as structured, version-controlled data rather than docs and spreadsheets.

Responsibilities

• Architect GRC's Engineering Foundation: Build pipelines and codified source of truth — controls, policies, and framework mappings captured as structured, version-controlled data fed by live control and system state, enabling cross-framework evidence mapping.
• Build Continuous Controls Monitoring: Automate evidence collection, control testing, and monitoring across cloud and internal systems; tune detection for drift and misconfiguration; ensure continuous audit readiness.
• Turn Data into Risk Signal: Create dashboards and SQL-driven reporting to provide real-time visibility into risk posture for team and leadership.
• Drive Data-Informed Risk Assessments: Conduct security and technology risk assessments and recommend mitigations using data, while reducing manual overhead.
• Automate Operational Toil: Eliminate recurring manual work with durable automation across evidence pulls, access reviews, questionnaires, and risk-register upkeep.
• Shift Compliance Left with Code and AI: Embed compliance checks into CI/CD as policy-as-code, prototype self-healing policies, and scale AI-assisted workflows.
• Future-proof for Continuous Compliance: Build toward machine-readable, continuously validated evidence to meet evolving authorization expectations.

Skills

Python

SQL

Dashboarding

Tool ownership

AWS

Cloud security

Education

Degree in Computer Science / Cybersecurity

Tools

Terraform

OPA/Rego

Sentinel

Mode

Job description

Plaid is building an engineered, continuous-compliance platform. You will architect the GRC foundation, codify controls, and enable real-time risk signals across security, risk, and engineering teams.

You will automate evidence collection, implement continuous controls monitoring, and turn data into KPI dashboards. This role blends software engineering with governance to drive scalable, auditable compliance.