Security GRC Engineer: Automate Compliance & Risk

Eudia; Palo Alto (CA); Sur place; USD 130 000 - 180 000; Plein temps

Résumé du poste

Eudia is hiring a Security GRC Engineer to translate regulatory requirements into concrete controls, implement them with Engineering, and automate evidence collection for continuous audit readiness. You will operate across SOC 2, ISO 27001, HIPAA, and AI governance, shaping practical security in a fast-growing SaaS environment.

You will own control mappings, risks, findings, and remediation tracking, collaborating with Engineering, IT, and Product to align security with how Eudia ships software.

Qualifications

• 4+ years in security, GRC, security engineering, cloud security, or compliance engineering.
• Hands-on understanding of SaaS and cloud environments: identity, networking, logging, CI/CD, data flows.
• Ability to read Terraform, Kubernetes manifests, CI/CD configuration, IAM policies.
• Experience with at least two of SOC 2, ISO 27001, HIPAA, or NIST CSF / 800-53.
• Strong writing; explain controls to engineers, auditors, customers, and executives.

Responsabilités

• Translate requirements from SOC 2, ISO 27001, HIPAA, and customer security assessments into concrete controls, then validate they work.
• Automate evidence collection and control testing to keep audit readiness continuous.
• Drive audit readiness and work with auditors to produce evidence and remediate findings.
• Own control mappings, risks, findings, exceptions, and remediation tracking across frameworks.
• Partner with Engineering, Infrastructure, IT, and Product to design controls that fit how Eudia builds software.
• Support security reviews, due diligence, and customer trust programs for large enterprise customers.

Connaissances

Security engineering

GRC

Cloud security

CI/CD

Terraform

Kubernetes

Outils

Terraform

Kubernetes

SQL

Description du poste

Eudia is hiring a Security GRC Engineer to translate regulatory requirements into concrete controls, implement them with Engineering, and automate evidence collection for continuous audit readiness. You will operate across SOC 2, ISO 27001, HIPAA, and AI governance, shaping practical security in a fast-growing SaaS environment.

You will own control mappings, risks, findings, and remediation tracking, collaborating with Engineering, IT, and Product to align security with how Eudia ships software.