GRC Security Engineer - Third-Party Risk & Presales

Digitailor; United States; On-site; USD 100,000 - 228,000; Full time

Job summary

SpaceXSI seeks a mid-to-senior Governance, Risk, and Compliance professional focused on third-party risk and customer trust. You’ll help sales with security posture, complete vendor questionnaires, and guide GRC processes across AI/DevOps environments.

You’ll bridge Engineering, Security, Legal, and Product to ensure accurate, credible customer responses, while advancing governance and assurance programs in a fast-moving deal cycle.

Qualifications

• Experience completing or owning customer vendor security questionnaires and due-diligence discussions with enterprise buyers.
• Working technical fluency across AI/LLM, CI/CD, IAM, DevOps/DevSecOps, Kubernetes, and cloud environments to understand control implications.
• Strong written and verbal communication to explain cybersecurity concepts to diverse audiences.

Responsibilities

• Attend customer meetings as security and compliance SME; present posture and answer questions with accuracy.
• Own responses to vendor security questionnaires, RFPs, SIG/CAIQ assessments, and due-diligence requests.
• Maintain a reusable knowledge base of control narratives aligned to SpaceXSI operations.
• Collaborate with Engineering, Security, Legal, and Product to keep content current as architecture evolves.
• Translate requirements into internal asks and distinguish must-haves from out-of-scope asks.
• Provide status updates to sales leadership on questionnaire volume and security priorities.

Skills

GRC

Vendor management

Security questionnaires

AI governance

Kubernetes

IAM

CI/CD

DevSecOps

Cloud platforms (AWS/GCP/Azure)

Communication

Education

BSc in CS/InfoSec/Engineering

Tools

Vanta

Drata

SOC 2 / ISO 27001

Job description

SpaceXSI seeks a mid-to-senior Governance, Risk, and Compliance professional focused on third-party risk and customer trust. You’ll help sales with security posture, complete vendor questionnaires, and guide GRC processes across AI/DevOps environments.

You’ll bridge Engineering, Security, Legal, and Product to ensure accurate, credible customer responses, while advancing governance and assurance programs in a fast-moving deal cycle.