Security GRC Engineer

Cursor; San Francisco (CA); On-site; USD 140,000 - 220,000; Full time

Benefits offered by this job

Job summary

Anysphere, Inc. is seeking a Security GRC Engineer to design, implement, and scale our governance, risk, and compliance program.

You will automate compliance workflows, build self-serve tools for GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends hands-on technical implementation with strategic program development, shaping how we build trust with customers and auditors alike.

Qualifications

• You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.

Responsibilities

• Automate evidence gathering and continuous control testing.
• Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.
• Conduct security compliance reviews for new products, features, and vendors.
• Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.
• Support incident response communications — draft and review customer-facing updates during security incidents.
• Build self-serve documentation and tools to answer customer security and AI governance inquiries.
• Maintain corporate security policies.

Skills

SOC 2

ISO 27001

ISO 42001

AIUC-1

Job description

Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.

About the Role

Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.

You may be a fit if

You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.

You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome.

You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.

Sample projects include

Automate evidence gathering and continuous control testing.

Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.

Conduct security compliance reviews for new products, features, and vendors.

Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.

Support incident response communications — draft and review customer-facing updates during security incidents.

Build self-serve documentation and tools to answer customer security and AI governance inquiries.

Maintain corporate security policies.

U.S. EQUAL EMPLOYMENT OPPORTUNITY INFORMATION

Anysphere, Inc. provides equal employment opportunities to applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other classification protected by applicable law.

We invite all applicants to voluntarily self-identify their race, ethnicity, and gender. Submission of the information on this form is strictly voluntary and refusal to provide it will not subject you to any adverse treatment. Information obtained will be retained in a confidential file and separate from personnel records. This information may only be used in accordance with the provision of applicable federal laws, executive orders, and regulations. If you want more information about any of the sections, please check with a company representative.

Male Female Decline to self-identify

Race Hispanic or Latino White (Not Hispanic or Latino) Black or African American (Not Hispanic or Latino) Native Hawaiian or Other Pacific Islander (Not Hispanic or Latino) Asian (Not Hispanic or Latino) American Indian or Alaska Native (Not Hispanic or Latino) Two or More Races (Not Hispanic or Latino) Decline to self-identify

SELF-IDENTIFICATION OF VETERAN STATUS (Completion is voluntary and will not subject you to adverse treatment)

If you believe that you belong to any of the following categories of protected veterans, please indicate by making the appropriate selection

Disabled veteran – A veteran who served on active duty in the U.S. military and is entitled to disability compensation (or who but for the receipt of military retired pay would be entitled to disability compensation) under laws administered by the Secretary of Veterans Affairs, or was discharged or released from active duty because of a service-connected disability

Recently separated veteran – A veteran separated during the three-year period beginning on the date of the veteran's discharge or release from active duty in the U.S military, ground, naval, or air service

Active duty wartime or campaign badge veteran – A veteran who served on active duty in the U.S. military during a war, or in a campaign or expedition for which a campaign badge was authorized under the laws administered by the Department of Defense

Armed forces service medal veteran – A veteran who, while serving on active duty in the U.S. military, ground, naval, or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985 (61 Fed. Reg. 1209).

I identify as one or more of the classifications of protected veteran listed above I am not a protected veteran I decline to self-identify for protected veteran status