GRC Security Engineer - AI Governance & Frameworks

xAI; New York (NY); Presencial; USD 100.000 - 198.000; Jornada completa

Descripción de la vacante

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) Engineer to own and scale our security and AI governance posture. You will translate control requirements into technical implementations and work with engineers to bake compliance into architecture and CI/CD.

You will collaborate with legal, product, and leadership to keep AI systems audit-ready across enterprise, commercial, and public-sector environments, while championing a culture of security and compliance.

Formación

• 3+ years in GRC or security compliance with hands-on engineering responsibilities.
• Experience implementing and maintaining security compliance frameworks in cloud environments (AWS, GCP, or Azure).
• Experience with Compliance-as-Code and automation tooling.

Responsabilidades

• Own and audit compliance programs across SOC 2, NIST CSF, NIST 800-53, ISO 27001, and ISO 42001, and EU AI Act.
• Design controls, mapping, evidence collection, and remediation tracking.
• Develop compliance-as-code and automated evidence pipelines.
• Operate GRC platforms like Vanta; integrate with cloud, identity, and engineering tooling.
• Embed compliance requirements early in design reviews with engineers.
• Maintain corporate policies, standards, and procedures for governance and AI management.
• Lead risk assessments and compliance reviews for new products and AI deployments.
• Liaise with external auditors and regulators; bridge audit requests with internal teams.
• Champion a culture of security and compliance across the company.

Conocimientos

GRC engineering

Security audits

CI/CD security

Regulatory frameworks

Educación

Bachelor's degree in computer science

Herramientas

Vanta

Drata

Descripción del empleo

SpaceXSI is seeking an experienced Governance, Risk, and Compliance (GRC) Engineer to own and scale our security and AI governance posture. You will translate control requirements into technical implementations and work with engineers to bake compliance into architecture and CI/CD.

You will collaborate with legal, product, and leadership to keep AI systems audit-ready across enterprise, commercial, and public-sector environments, while championing a culture of security and compliance.