GRC Engineer: Automation & Risk for Secure Growth

Replit; California (MO); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary & equity

Health, dental, vision

Job summary

Replit is seeking a GRC Engineer to architect and automate our governance, risk, and compliance program from Foster City, CA. You will partner with Engineering, Legal, and Sales to embed privacy and security controls across product development and customer engagements.

This role emphasizes pragmatic governance, reducing risk while maintaining velocity in a high-growth startup. Expect collaboration with auditors, a focus on SOC 2 and ISO 27001, and a hands-on approach to compliance automation.

Qualifications

• 8+ years of experience in GRC or Information Security.
• Technical fluency with cloud (GCP/AWS) and security architecture.
• Deep experience with SOC 2, ISO 27001, PCI, HIPAA and privacy laws.

Responsibilities

• Own the technical vision for Replit’s GRC program and drive automation using Compliance-as-Code.
• Partner with Engineering and Legal to bake in compliance requirements early in design and implementation.
• Manage risk through the Cybersecurity Risk Register and evolve posture across certifications.
• Automate audit processes and third-party risk assessments to scale with the business.

Skills

GRC

InfoSec

Cloud security

Security architecture

SOC 2

ISO 27001

Drata

Vanta

Tools

Vanta

Drata

Job description

Replit is seeking a GRC Engineer to architect and automate our governance, risk, and compliance program from Foster City, CA. You will partner with Engineering, Legal, and Sales to embed privacy and security controls across product development and customer engagements.

This role emphasizes pragmatic governance, reducing risk while maintaining velocity in a high-growth startup. Expect collaboration with auditors, a focus on SOC 2 and ISO 27001, and a hands-on approach to compliance automation.