GRC Engineer: Continuous Compliance & Code-Driven Security

Plaid; United States; Remoto; USD 180.000 - 260.000; Tempo integral

Resumo da vaga

Plaid is seeking a Senior GRC Engineer to own and shape Plaid's GRC Engineering. You will codify controls, automate evidence collection, and build a scalable end-to-end assurance framework that spans SOC 2, ISO, and NIST mappings.

You will turn control and risk data into live dashboards, drive risk-informed assessments, and embed compliance into CI/CD with policy-as-code and AI-assisted workflows. This role blends security, data, and engineering at scale.

Qualificações

• Strong Python and SQL, with a proven track record of building API/webhook integrations that connect disparate systems.
• Experience owning an internal tool or service end to end — design, build, operate, and maintain.
• Hands‑on experience with AWS and cloud‑native security controls, including querying cloud, GitHub, and SaaS logs.
• Proficiency with dashboarding / data‑visualization tools to turn control and risk data into KPIs.

Responsabilidades

• Architect GRC's Engineering Foundation: Build pipelines and codified truth the function runs on; map controls to evidence across SOC 2, ISO, NIST.
• Build Continuous Controls Monitoring: Automate evidence collection, control testing, and monitoring across cloud and internal systems.
• Turn Data into Risk Signal: Build dashboards and SQL-driven reporting for real-time risk visibility.
• Drive Data-Informed Risk Assessments: Conduct risk assessments and recommend mitigations using data.
• Automate Operational Toil: Eliminate recurring manual work with durable automation across workflows.
• Shift Compliance Left with Code and AI: Embed checks into CI/CD as policy-as-code; use AI-assisted workflows.
• Future-proof for Continuous Compliance: Move toward machine-readable evidence for new markets.

Conhecimentos

Python

SQL

APIs & webhooks

AWS

Dashboarding

Mode

Security controls

CI/CD

Ferramentas

Terraform

OPA/Rego

Sentinel

Mode

Descrição da vaga

Plaid is seeking a Senior GRC Engineer to own and shape Plaid's GRC Engineering. You will codify controls, automate evidence collection, and build a scalable end-to-end assurance framework that spans SOC 2, ISO, and NIST mappings.

You will turn control and risk data into live dashboards, drive risk-informed assessments, and embed compliance into CI/CD with policy-as-code and AI-assisted workflows. This role blends security, data, and engineering at scale.