GRC Engineer: AI Governance & Compliance Automation

Maven Ventures; Palo Alto (CA); On-site; USD 100,000 - 198,000; Full time

Benefits offered by this job

Equity

Medical, vision, dental

401(k)

Disability & life insurance

Job summary

SpaceXSI is seeking a mid-level Governance, Risk, and Compliance (GRC) Engineer to join our security and AI governance team. You will set standards, design and implement controls, and automate compliance for fast-moving AI systems across enterprise, commercial, and public-sector environments.

The role involves collaboration with engineering, legal, product, and leadership; you will translate requirements into technical controls and drive continuous assurance through CI/CD integration.

Qualifications

• Bachelor's degree in computer science, information security, cybersecurity, or engineering/STEM field.
• 3+ years of experience in GRC, security compliance, or technology audit with hands-on GRC engineering responsibilities.
• Experience implementing security compliance frameworks in cloud environments (AWS, GCP, or Azure).
• Expert-level knowledge of SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001 — including building and running controls.

Responsibilities

• Execute security compliance implementation and audits across SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and EU AI Act.
• Develop Compliance-as-Code and continuous compliance capabilities; policy-as-code and automated validation.
• Operate and extend GRC platforms (e.g., Vanta) as system of record; integrate with cloud and engineering tooling.
• Embed compliance requirements early in design reviews; translate frameworks into technical controls for auditors.
• Develop and improve corporate policies, standards, and procedures for AI governance and security posture.
• Lead risk assessments for AI/ML operations, cybersecurity, privacy, and cloud deployments; distinguish risk from theater.
• Lead audits with external auditors and regulators; be the bridge between auditors and internal teams.
• Champion security/compliance culture across the company; educate teams on controls.

Skills

GRC engineering

Security compliance

CI/CD integration

Compliance-as-Code

Auditing

Vanta/Drata

Cloud security

Frameworks knowledge

Stakeholder mgmt

Education

Bachelor's in CS/Security

Tools

Vanta

Drata

Job description

SpaceXSI is seeking a mid-level Governance, Risk, and Compliance (GRC) Engineer to join our security and AI governance team. You will set standards, design and implement controls, and automate compliance for fast-moving AI systems across enterprise, commercial, and public-sector environments.

The role involves collaboration with engineering, legal, product, and leadership; you will translate requirements into technical controls and drive continuous assurance through CI/CD integration.