GRC Engineer: Automate Compliance at Scale

Plaid Inc.; San Francisco, Seattle, New York (CA, WA, NY); On-site; USD 210,000 - 270,000; Full time

Job summary

Plaid Inc. is seeking a senior candidate to lead GRC Engineering, turning compliance into code and building scalable, data-driven controls. You will codify controls, automate evidence collection, and craft dashboards that reveal risk in real time.

You will own the architecture of GRC Engineering, create a codified source of truth for controls, and drive AI-assisted workflows to scale compliance across the organization.

Qualifications

• Strong Python and SQL, with a proven track record of building API/webhook integrations that connect disparate systems.
• Experience owning an internal tool or service end to end — design, build, operate, and maintain — with real users depending on it.
• Hands‑on experience with AWS and cloud‑native security controls, including the ability to query cloud, GitHub, and SaaS logs.
• Proficiency with dashboarding / data‑visualization tools (e.g., Mode) to turn control and risk data into KPIs and signal.

Responsibilities

• Architect GRC's Engineering Foundation: Build pipelines and codified source of truth for controls, policies, and framework mappings captured as structured, version-controlled data.
• Build Continuous Controls Monitoring: Automate evidence collection, control testing, and monitoring across cloud and internal systems.
• Turn Data into Risk Signal: Build dashboards and SQL-driven reporting that turn raw control and risk data into KPIs with real-time visibility.
• Drive Data-Informed Risk Assessments: Conduct security and technology risk assessments and recommend mitigations using data.
• Automate Operational Toil: Eliminate recurring manual work with durable automation across workflows.
• Shift Compliance Left with Code and AI: Embed compliance checks into CI/CD as policy-as-code and scale AI-assisted workflows.
• Future-proof for Continuous Compliance: Build toward machine-readable, continuously validated evidence for new markets.

Job description

Plaid Inc. is seeking a senior candidate to lead GRC Engineering, turning compliance into code and building scalable, data-driven controls. You will codify controls, automate evidence collection, and craft dashboards that reveal risk in real time.

You will own the architecture of GRC Engineering, create a codified source of truth for controls, and drive AI-assisted workflows to scale compliance across the organization.