GRC Engineer - Continuous Compliance & Risk Signals

Plaid Inc.; Pennsylvania; Vor Ort; USD 156.000 - 214.000; Vollzeit

Zusammenfassung

Plaid is seeking a highly capable GRC Engineer to lead the GRC Engineering function, building a scalable, codified foundation for controls, policies, and evidence. You will transform manual compliance into automated, data-driven processes across CI/CD and cloud environments.

In this role you will design architecture, develop dashboards, and partner across security, risk, and engineering to reduce toil while increasing audit readiness and real-time risk visibility.

Qualifikationen

• Hands-on experience building end-to-end internal tools and services.
• Strong Python and SQL skills with API/webhook integrations.
• Experience with AWS and cloud-native security controls.
• IaC (Terraform) and policy-as-code (OPA/Rego, Sentinel).
• Ability to map controls to multiple frameworks (SOC 2, ISO, NIST).

Aufgaben

• Architect GRC's Engineering Foundation: codified data for controls and policies mapped to multiple frameworks.
• Build Continuous Controls Monitoring: automate evidence collection and drift detection across cloud and on-premises.
• Turn Data into Risk Signal: create dashboards and KPI reporting for real-time risk visibility.
• Drive Data-Informed Risk Assessments: propose mitigations using data; reduce manual overhead.
• Automate Operational Toil: replace repetitive tasks with durable automation across workflows.
• Shift Compliance Left with Code and AI: embed checks into CI/CD and scale AI-assisted policies.
• Future-proof for Continuous Compliance: advance machine-readable evidence for new markets.

Kenntnisse

Python

SQL

API integrations

Internal tool ownership

AWS

Dashboarding

Ausbildung

Degree in Computer Science, Cybersecurity, or related field

Tools

Terraform

OPA/Rego

Sentinel

AWS

Mode

Jobbeschreibung

Plaid is seeking a highly capable GRC Engineer to lead the GRC Engineering function, building a scalable, codified foundation for controls, policies, and evidence. You will transform manual compliance into automated, data-driven processes across CI/CD and cloud environments.

In this role you will design architecture, develop dashboards, and partner across security, risk, and engineering to reduce toil while increasing audit readiness and real-time risk visibility.