GRC Engineer — Automation & Risk Management

VulnU; Sunnyvale, Northern (CA, KY); Hybrid; USD 160,000 - 190,000; Full time

Benefits offered by this job

Retirement match

Equity

Job summary

Applied Intuition is seeking a GRC Engineer to own day-to-day GRC operations, including risk assessments, continuous compliance programs, and third-party security reviews.

You will automate control monitoring, maintain the risk register, and drive remediation with risk owners while aligning with industry frameworks such as ISO 27001 and NIST RMF. Strong communication and experience with GRC automation are essential for success.

Qualifications

• Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.
• 5–8 years of experience in security GRC, risk management, or compliance program ownership.
• Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor).
• Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting.
• Strong organizational skills and ability to manage multiple priorities under tight deadlines.
• Strong written and verbal communication skills with technical execution rigor.

Responsibilities

• Own day-to-day GRC operations, including risk assessments, driving continuous compliance programs, automating control monitoring and evidence collection, and completing third party security reviews.
• Perform and improve security risk assessments, maintain the risk register, partner with risk owners to drive risk remediation and mitigation.
• Own the third-party risk management lifecycle, including vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation.
• Improve the efficiency and consistency of vendor assessments through standardized workflows, automation, and risk-based review processes.
• Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness and work with control owners towards strengthening security posture.
• Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with focus on automation and scalability.
• Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements to practical controls, assessments, and evidence.
• Experience defining security metrics/KPIs and executive reporting frameworks.
• Experience completing customer security questionnaires and assurance reviews.
• Exposure to automotive security and safety standards (e.g., ISO 21434, ISO 26262).

Skills

GRC operations

risk assessments

control monitoring

third party reviews

risk remediation

risk register

automation

AI-driven automation

communication

Education

Bachelor’s or Master’s in Information Security, CS, Engineering

Tools

GRC platforms (Vanta, Anecdotes, Drata, OneTrust)

Job description

Applied Intuition is seeking a GRC Engineer to own day-to-day GRC operations, including risk assessments, continuous compliance programs, and third-party security reviews.

You will automate control monitoring, maintain the risk register, and drive remediation with risk owners while aligning with industry frameworks such as ISO 27001 and NIST RMF. Strong communication and experience with GRC automation are essential for success.