Remote AI-Driven GRC Engineer for Scale

RiverPark Ventures; New York (NY); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental and Vision plans

401(k) plan with match

Paid holidays

Vacation days (20)

Sick days (5)

Disability insurance

Life insurance

Paid family leave

Employee Assistance Program

Self-care stipends

Job summary

ButterflyMX is hiring a GRC Engineer to own governance, risk, and compliance programs. You will re-engineer processes with AI-powered automation, from continuous controls monitoring to vendor risk intake and policy drafting. This generalist role covers compliance operations, risk management, audits, and privacy support.

You will report to the CISO and build scalable workflows, collaborate with stakeholders, and drive an always-on compliance posture across the organization.

Qualifications

• 3+ years in GRC, information security compliance, or risk management.
• Hands-on SOC 2 auditing experience.
• Familiarity with CIS Controls v8, NIST CSF, NIST AI RMF, ISO 42001.
• Experience conducting rapid third-party/vendor risk assessments.
• Excellent written communication and policy documentation skills.
• Experience with Vanta or equivalent tooling.
• Certifications a plus: CISA, CRISC, CISSP, CIPP.

Responsibilities

• Own and mature the company risk register with AI-supported workflows.
• Lead external audit management (SOC 2 Type II) and continuous monitoring.
• Engineer Trust and Assurance programs with automated intake and AI responses.
• Build vendor and supply chain risk programs with automated workflows.
• Redesign security and privacy policies and track updates.
• Manage common controls monitoring and alerting in toolchains.
• Modernize security awareness and training programs.
• Operate an integrated compliance calendar with reminders.
• Support privacy practices: data subject requests and notices.
• Monitor AI governance developments and surface policy changes.

Skills

GRC

Security compliance

SOC 2 auditing

Risk management

AI tooling

Policy drafting

Vendor risk

Audit readiness

Communication

Continuous monitoring

Education

CISA

CRISC

CISSP

CIPP

Tools

Vanta platform

Job description

ButterflyMX is hiring a GRC Engineer to own governance, risk, and compliance programs. You will re-engineer processes with AI-powered automation, from continuous controls monitoring to vendor risk intake and policy drafting. This generalist role covers compliance operations, risk management, audits, and privacy support.

You will report to the CISO and build scalable workflows, collaborate with stakeholders, and drive an always-on compliance posture across the organization.