GRC Engineering Lead — Automate Compliance & Risk

Anduril Industries; Washington; On-site; USD 166,000 - 253,000; Full time

Benefits offered by this job

Equity grants

Benefits package

Job summary

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You’ll set technical direction, grow the team, and create automated evidence pipelines spanning cloud and on-prem systems.

You’ll translate CMMC, NIST 800-171, and FedRAMP into automated checks, design scalable data collection, and collaborate with partner teams to drive risk-aligned remediation. A U.S. Secret clearance is required.

Qualifications

• 6+ years in security engineering, GRC, or a related role, including hands-on building of automation or data pipelines.
• Hands-on experience operationalizing compliance frameworks (CMMC, NIST 800-171, 800-53, FedRAMP, SOC 2).
• Experience designing data collection and integration across cloud and SaaS systems (APIs, log/event pipelines, data lakes).
• Experience with infrastructure as code (Terraform, AWS CDK) in a production capacity.
• Ability to set technical direction and mentor engineers.
• Eligible to obtain and maintain a U.S. Secret clearance.

Responsibilities

• Build the pipeline that collects evidence from Anduril’s systems and maps it to a normalized control model.
• Construct reusable collectors and schemas as reference architectures so each new control is assembly, not reinvention.
• Stand up the system of record for controls, mappings, and evidence, and drive the build-vs-buy analysis.
• Surface control drift and route findings to system owners with remediation and risk-acceptance paths.
• Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable checks and pass/fail signals.
• Set technical direction and mentor a growing engineering team.

Skills

Security engineering

GRC

Go

Python

Rust

Automation

Data pipelines

Cloud and SaaS data integration

Terraform

AWS CDK

Mentoring engineers

Independent work

U.S. Secret clearance

Tools

Go

Python

Rust

Job description

Anduril Industries is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You’ll set technical direction, grow the team, and create automated evidence pipelines spanning cloud and on-prem systems.

You’ll translate CMMC, NIST 800-171, and FedRAMP into automated checks, design scalable data collection, and collaborate with partner teams to drive risk-aligned remediation. A U.S. Secret clearance is required.