GRC Engineer: Automate AI Compliance at Scale

Sierra Ventures; San Francisco (CA); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Stock options

Health & wellness

Meals provided in office

Parental leave

Unlimited PTO

Visa sponsorship

Job summary

Reflection AI in San Francisco seeks a Governance, Risk, & Compliance engineer to translate policy into scalable technical controls across SOC 2, ISO 27001, and NIST. You’ll build automated evidence collection, manage data lineage, and support vendor assessments.

Work with Engineering, Security, and IT to implement requirements, maintain GRC integrations like Vanta, and drive regulatory compliance as a product. Join a team shaping responsible AI governance.

Qualifications

• 3–6 years of software or security engineering experience.
• Experience implementing security frameworks like SOC 2, ISO 27001, or NIST.
• Ability to translate policy into technical requirements.
• Collaborate with compliance, legal, and engineering teams.

Responsibilities

• Design and build automated controls and monitoring for security frameworks.
• Collaborate with Engineering, Security, and IT to implement requirements.
• Build tooling for compliance workflows and integrations (Vanta, etc.).
• Translate regulatory requirements into concrete technical specs.
• Support due diligence for customer security questionnaires and audits.
• Maintain integrations between GRC systems and source-of-truth systems.
• Help scope environment separations for regulatory compliance.

Skills

Python

APIs & Integrations

Automation tooling

GRC tooling

Security framework experience

Collaboration

Data governance knowledge

ML/AI data lineage

Tools

Vanta

Cloud platforms

IAM concepts

GRC dashboards

Job description

Reflection AI in San Francisco seeks a Governance, Risk, & Compliance engineer to translate policy into scalable technical controls across SOC 2, ISO 27001, and NIST. You’ll build automated evidence collection, manage data lineage, and support vendor assessments.

Work with Engineering, Security, and IT to implement requirements, maintain GRC integrations like Vanta, and drive regulatory compliance as a product. Join a team shaping responsible AI governance.