GRC Engineer: End-to-End Compliance & Automation

Aegis AI; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Aegis AI is seeking a GRC Engineer to advance our security program and own SOC 2 end to end. You will manage audits, policies, and evidence across frameworks, collaborating with the head of security, engineers, and customers to address security reviews.

You will drive automation, risk management, and vendor risk at scale, shaping BC/DR, incident response, and privacy posture as we grow. Join a fast, result-driven team delivering customer trust.

Qualifications

• 4+ years in GRC, security compliance or audit at a SaaS company
• Answered enterprise security questionnaires and write clearly enough to close threads
• Technical enough to read architecture diagrams and question engineers’ answers
• You script in Python or similar, comfortable with APIs, and avoid duplicating evidence collection
• Working knowledge of major privacy regimes and what they mean for a data processor
• Organized, self-directed, and honest about what you don't know yet

Responsibilities

• Own Compliance end to end and keep the program audit-ready year round
• Pave the road to what's next and stay ahead of customer demands for future certifications
• Run our risk management program and maintain the risk register
• Own the policy suite and keep policies, standards and procedures current
• Own BC/DR and incident response plans and run playbooks and customer notifications
• Answer security questionnaires and TPRM reviews end to end and build a fast evidence library
• Run vendor and subprocessor risk and manage DPAs and the subprocessor list
• Map controls across industry frameworks and audit against them
• Expand evidence automation by pulling proof from live systems via APIs and scripts

Skills

GRC knowledge

SOC 2 Type II

Security compliance

Audit

Python scripting

APIs experience

Clear writing

Privacy regimes knowledge

Organized/self-directed

Job description

Aegis AI is seeking a GRC Engineer to advance our security program and own SOC 2 end to end. You will manage audits, policies, and evidence across frameworks, collaborating with the head of security, engineers, and customers to address security reviews.

You will drive automation, risk management, and vendor risk at scale, shaping BC/DR, incident response, and privacy posture as we grow. Join a fast, result-driven team delivering customer trust.