GRC Engineering Lead — Automate Compliance Systems

Anduril; Washington (District of Columbia); On-site; USD 166,000 - 253,000; Full time

Job summary

Anduril Industries in Washington, DC, is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will design the pipeline that collects evidence from Anduril's systems and map it to a normalized control model.

You will stand up the system of record for controls, mentor engineers, and translate frameworks such as CMMC, NIST 800-171, and FedRAMP into automatable checks.

Qualifications

• 6+ years in security engineering, GRC or related role.
• Hands-on building of automation or data pipelines.

Responsibilities

• Build the pipeline that collects evidence from Anduril's systems and maps it to a normalized control model.
• Construct reusable collectors and schemas as reference architectures so each new control is assembly, not reinvention.
• Stand up the system of record for controls, mappings, and evidence, and drive the build-vs-buy analysis.
• Surface control drift and route findings to system owners with clear remediation and risk-acceptance paths.
• Translate frameworks (CMMC, NIST 800-171, FedRAMP/IL5) into automatable technical checks and pass/fail signals.
• Set technical direction and mentor a growing engineering team.

Skills

Go

Python

Rust

Automation pipelines

Mentoring engineers

Tools

Terraform

AWS CDK

Job description

Anduril Industries in Washington, DC, is seeking a Governance, Risk, and Compliance Engineering Lead to build the engineering core of our GRC program. You will design the pipeline that collects evidence from Anduril's systems and map it to a normalized control model.

You will stand up the system of record for controls, mentor engineers, and translate frameworks such as CMMC, NIST 800-171, and FedRAMP into automatable checks.