Security GRC Engineer - Automate Compliance & Trust

Cursor; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

Cursor, a fast-growing team in San Francisco, seeks a Security GRC Engineer to automate governance, risk, and compliance across product and infrastructure. You will lead automation of evidence gathering and build self-serve tools for GTM teams and auditors.

You’ll work cross‑functionally with Engineering, Legal, and Trust & Safety to translate security requirements into practical controls and docs, ensuring our products meet SOC 2, ISO 27001, and AI governance standards.

Qualifications

• Experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
• Ability to trace external claims to product and infrastructure configurations.
• Strong cross-functional collaboration with Engineering, Legal, GTM, and auditors.

Responsibilities

• Automate evidence gathering and continuous control testing.
• Own relationships with audit firms and customers to explain the security program.
• Conduct security compliance reviews for new products, features, and vendors.
• Provide timely guidance on security and AI governance terms in contracts.
• Support incident response communications with customer-facing updates.
• Build self-serve documentation and tools for customer security inquiries.
• Maintain corporate security policies.

Job description

Cursor, a fast-growing team in San Francisco, seeks a Security GRC Engineer to automate governance, risk, and compliance across product and infrastructure. You will lead automation of evidence gathering and build self-serve tools for GTM teams and auditors.

You’ll work cross‑functionally with Engineering, Legal, and Trust & Safety to translate security requirements into practical controls and docs, ensuring our products meet SOC 2, ISO 27001, and AI governance standards.