Security GRC Engineer — Build Automated Compliance for AI Legal

Eudia Counsel; Palo Alto (CA); Sur place; USD 140 000 - 220 000; Plein temps

Résumé du poste

Eudia Counsel is seeking a Security GRC Engineer in Palo Alto to help build and scale our security and compliance program. You will translate requirements into concrete controls, automate evidence, and drive audit readiness across SOC 2, ISO 27001, HIPAA, and emerging governance frameworks.

You will work directly with Engineering, IT, and Product to design controls that fit how we build software, supporting enterprise customers and AI governance initiatives.

Qualifications

• 4+ years in security, GRC, security engineering, cloud security, or compliance engineering.
• Hands-on understanding of modern SaaS and cloud environments: identity, cloud infrastructure, networking, logging, CI/CD, application security, data flows.
• Able to read and reason about Terraform, Kubernetes manifests, CI/CD configuration, IAM policies, and other infrastructure-as-code artifacts.
• Direct experience with at least two of SOC 2, ISO 27001, HIPAA, or NIST CSF / 800-53.
• Able to translate framework requirements into technical implementations and verify controls.
• Experience working shoulder to shoulder with engineers, not as a separate function.
• Hands-on experience using APIs, scripting, SQL, or similar tools to automate evidence collection and testing.
• Clear writing and ability to explain controls to engineers, auditors, customers, and executives.
• Strong judgment separating real security risk from compliance noise.
• Comfort in an early-stage startup where building the process is key.

Responsabilités

• Translate security requirements into concrete technical and operational controls and validate them.
• Automate evidence collection and control testing to enable continuous audit readiness.
• Lead audit readiness and work with auditors to produce evidence and remediate findings.
• Own control mappings, risks, findings, exceptions, and remediation tracking across frameworks.
• Partner with Engineering, Infrastructure, IT, and Product to design fitting controls for the software.
• Support security reviews, due diligence, and customer trust programs including security questionnaires and control documentation.
• Coordinate with vulnerability management to prioritize findings and drive closure.
• Support AI governance for legal-AI products: model inventory and data-handling requirements.
• Maintain healthy operational controls: access reviews, change management, logging, vendor risk, and incident response evidence.
• Work with ISSM on NIST 800-53 and FedRAMP-related control work as public-sector footprint grows.
• Turn repeatable compliance work into automation, infrastructure, or product capabilities.

Connaissances

Security mindset

Written communication

Cross-functional collaboration

Analytical thinking

Formation

Bachelor's degree in Computer Science, Information Security, or related field

Outils

Terraform

Kubernetes

CI/CD pipelines

IAM policies

APIs & SQL

Description du poste

Eudia Counsel is seeking a Security GRC Engineer in Palo Alto to help build and scale our security and compliance program. You will translate requirements into concrete controls, automate evidence, and drive audit readiness across SOC 2, ISO 27001, HIPAA, and emerging governance frameworks.

You will work directly with Engineering, IT, and Product to design controls that fit how we build software, supporting enterprise customers and AI governance initiatives.