Lead Security Risk Engineer, AI & GRC Automation

United States Digital Space LLC; Boston (MA); On-site; USD 140,000 - 210,000; Full time

Job summary

Klaviyos is seeking a Lead Security Governance & Risk Engineer to own parts of the risk program, turning policy into automated risk decisions. You’ll run risk registers, lead AI risk governance, and build automation to continuously quantify risk posture.

Collaboration with Trust & Compliance, Engineering, Legal, and Finance is essential to align risk with business priorities. The role demands hands-on risk engineering, cybersecurity risk quantification, and strong communication with senior

Qualifications

• 7+ years of experience in information security, technology risk, cyber risk, or operational risk within a large, complex, or high-growth organization, including hands-on risk engineering or quantitative risk work.
• Strong command of cyber risk quantification, able to express risk in financial and business terms (FAIR, riskquant, or similar) rather than qualitative severity ratings alone.
• Hands-on engineering ability: SQL, Python, and integrating with APIs to extract, transform, and load data between systems and to automate risk reporting.
• Experience building and running a technology and/or third-party risk register and taxonomy, with the tooling and process automation behind it.
• Working knowledge of security and AI frameworks (NIST CSF and RMF, ISO 27000 series, ISO 42001, SOC 2, PCI DSS, CIS Controls).
• Hands-on familiarity with modern risk and security tooling: third-party risk platforms, cyber risk quantification, vulnerability management, and endpoint and data-security telemetry.

Responsibilities

• Operate and maintain the risk register and taxonomy.
• Lead AI risk governance and ISO 42001 readiness.
• Drive third-party risk automation and risk scoring.
• Perform hands-on risk quantification to support leadership decisions.
• Support risk governance cadence with risk materials and reviews.
• Operate as a second line of defense with independent oversight and reporting.
• Collaborate across Engineering, Product, GTS, Legal, Internal Audit, ARIA, and Finance on risk findings.

Skills

Cyber risk quantification

Financial risk terms

Risk governance

Translate risk to business

Independent work

Communication to non-technical

SQL

Python

APIs integration

Tools

SQL

Python

APIs

Job description

Klaviyos is seeking a Lead Security Governance & Risk Engineer to own parts of the risk program, turning policy into automated risk decisions. You’ll run risk registers, lead AI risk governance, and build automation to continuously quantify risk posture.

Collaboration with Trust & Compliance, Engineering, Legal, and Finance is essential to align risk with business priorities. The role demands hands-on risk engineering, cybersecurity risk quantification, and strong communication with senior