GRC Engineer: AI Governance & Compliance

Cybersecurity Jobs; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical, Vision, Dental

401(k)

Disability insurance

Life insurance

Employee discounts

Job summary

Cybersecurity Jobs in Palo Alto is seeking a security compliance professional to support enterprise security and AI governance by building controls, automating evidence, and keeping systems audit-ready across frameworks.

You will partner with engineering, manage audits with external regulators, and advance Compliance-as-Code, policy-as-code, and continuous monitoring within CI/CD workflows.

Qualifications

• Bachelors degree in computer science, information security, cybersecurity or related field.
• 3+ years of experience in GRC, security compliance, or technology audit with hands-on GRC engineering responsibilities.
• Experience implementing security compliance frameworks in cloud environments (AWS, GCP, or Azure).
• Expert working knowledge of several frameworks: SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, including controls.

Responsibilities

• Plan and deliver security compliance implementations and audits across SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and EU AI Act.
• Develop and maintain Compliance-as-Code and policy-as-code with automated validation and evidence pipelines.
• Operate and extend GRC platforms (e.g., Vanta) as the system of record for controls and evidence.
• Partner with engineering to embed compliance requirements early in design reviews and translate obligations into technical controls.
• Create and maintain corporate policies, standards, and procedures supporting governance and AI management posture.
• Identify and prioritize risks across AI/ML, cybersecurity, data privacy, and cloud deployments; separate business risk from compliance theater.
• Lead risk assessments and compliance reviews for new products and architectural changes, focusing on AI system risks.
• Build relationships with external auditors and regulators; ensure requests are reasonable and relevant.
• Promote a security and compliance culture by educating teams on control purpose and rationale.

Skills

GRC engineering

Security compliance

Technology audit

CI/CD integration

IAM

Education

Bachelor’s degree in CS/Info Security/Engineering

Tools

Vanta

Drata

Job description

Cybersecurity Jobs in Palo Alto is seeking a security compliance professional to support enterprise security and AI governance by building controls, automating evidence, and keeping systems audit-ready across frameworks.

You will partner with engineering, manage audits with external regulators, and advance Compliance-as-Code, policy-as-code, and continuous monitoring within CI/CD workflows.