GRC Engineering Lead: Automate Compliance Pipelines

Anduril Industries; Seattle (WA); On-site; USD 166,000 - 253,000; Full time

Job summary

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will create a pipeline and tooling to turn systems into defensible compliance evidence, replacing manual audit scrambles.

You will set technical direction for the function, grow the team, and drive automation for CMMC, NIST 800-171, and FedRAMP/IL5, delivering scalable, auditable controls across cloud and on-prem environments.

Qualifications

• 6+ years in security engineering, GRC, or a related role with hands-on automation or data pipeline work.
• Experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2)
• Designing data collection across cloud and SaaS systems (APIs, log/event pipelines, data lakes)
• Infrastructure as code experience (Terraform, AWS CDK) in production
• Ability to set technical direction and mentor engineers
• Ability to work autonomously and drive cross-team alignment
• Eligible to obtain and maintain a U.S. Secret clearance

Responsibilities

• Build and maintain the pipeline that collects evidence and maps it to a normalized control model.
• Create reusable collectors and schemas to accelerate new controls.
• Stand up the system of record for controls, mappings, and evidence; evaluate build-vs-buy.
• Surface control drift and route remediation to system owners with risk-acceptance paths.
• Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable checks and pass/fail signals.
• Set technical direction and mentor a growing engineering team

Skills

Security engineering

GRC program leadership

Programming (Go/Python/Rust)

Data pipelines

Mentoring engineers

Autonomy

Tools

Terraform

AWS CDK

APIs

Kubernetes

Job description

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will create a pipeline and tooling to turn systems into defensible compliance evidence, replacing manual audit scrambles.

You will set technical direction for the function, grow the team, and drive automation for CMMC, NIST 800-171, and FedRAMP/IL5, delivering scalable, auditable controls across cloud and on-prem environments.