GRC Engineering Lead: Automate Compliance & Risk

Anduril; Boston (MA); Hybrid; USD 166,000 - 253,000; Full time

Benefits offered by this job

Equity grants

Top-tier benefits

Job summary

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will design the pipeline that turns systems data into evidence of compliance and mentor a growing team.

This role requires 6+ years in security engineering, hands-on automation, and experience with NIST/CMMC frameworks. You will collaborate across product and security to automate checks and maintain a defensible control environment.

Qualifications

• 6+ years in security engineering or related role.
• Hands-on automation or data-pipeline experience.
• Strong programming in Go, Python or Rust.
• Experience automating compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2).
• Experience with cloud and SaaS data integration (APIs, log pipelines).
• Infrastructure as code with Terraform/AWS CDK.
• Mentors engineers and sets technical direction.
• Able to work autonomously and align with partner teams.

Responsibilities

• Build a pipeline collecting evidence from systems and map it to a control model.
• Create reusable collectors and schemas as reference architectures.
• Stand up the system of record for controls, mappings, and evidence.
• Surface control drift and route remediation and risk acceptance.
• Translate frameworks into automatable technical checks and pass/fail signals.
• Set technical direction and mentor the engineering team.

Skills

Security engineering

GRC

Automation pipelines

Go/Python/Rust

Data integration

IaC

Leadership

Autonomy

Tools

Terraform

AWS CDK

APIs

Data lakes

Job description

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will design the pipeline that turns systems data into evidence of compliance and mentor a growing team.

This role requires 6+ years in security engineering, hands-on automation, and experience with NIST/CMMC frameworks. You will collaborate across product and security to automate checks and maintain a defensible control environment.