Senior GRC Engineer

biograph wealth advisors; New York (NY); Hybrid; USD 150,000 - 200,000; Full time

Benefits offered by this job

Equity in an early stage company

Medical, dental, and vision insurance

401(k)

Paid maternity / paternity leave

Unlimited PTO

Biograph Membership

Job summary

Biograph Wealth Advisors in New York is seeking a founding GRC Engineer to enhance our compliance program. You'll lead HIPAA initiatives, ensuring rigorous security across our data-driven health solutions.

This hybrid role allows for a blend of remote and in-office collaboration, fostering an innovative and inclusive work culture. We're looking for a passionate engineer who can embrace challenges and drive change in health technology.

Qualifications

• 6+ years of professional experience in Security Engineering, GRC Engineering, DevOps, or Cloud Security roles.
• Experience building, scaling, and modernizing compliance programs in fast-paced startup environments.
• Deep understanding of HIPAA requirements and mapping them to technical controls.

Responsibilities

• Lead the strategy and execution of HIPAA compliance operations.
• Own the implementation and maintenance of compliance automation platforms.
• Design and build automated evidence collection workflows.

Skills

Security Engineering

GRC Engineering

DevOps

Cloud Security

HIPAA compliance

Python

Google Cloud Platform (GCP)

Continuous compliance tooling

Tools

Terraform

Job description

Biograph is looking for a founding GRC Engineer to help us mature and scale a modern, automation-first compliance program to secure our data-driven approach to preventative care.

Our small and nimble engineering team thrives on ownership and autonomy. We're building foundational systems with an eye toward scalability and an emphasis on best practices. We're looking for an "engineer-first" GRC practitioner who values product and communication as much as technical excellence. Joining this early provides a great opportunity to help shape our technical systems, security posture, and culture.

This is a hybrid role. Team members typically work in our Manhattan office ~3 days a week, with empathetic flexibility.

WHAT YOU WILL DO

We are building new impactful products and need to secure our infrastructure for the future. Your immediate mission will be to lead and advance our HIPAA compliance initiatives, ensuring rigorous security standards across our environment. You will have opportunities across our tech stack:

• Build and Execute: Lead the strategy and execution of our HIPAA compliance operations, identifying technical gaps, authoring policies, and implementing required controls. Lay the architectural groundwork for upcoming SOC 2 and HITRUST certifications.

• GRC Engineering & Automation: Own the implementation, configuration, and maintenance of continuous compliance automation platforms (e.g., Vanta, Drata, or Secureframe), integrating them deeply into our tech stack.

• Infrastructure Integration: Design and build automated evidence collection workflows using scripts (Python, Go, or similar) to pull data from our GCP environment, identity providers, and SaaS tools. Partner with DevOps to embed compliance checks directly into CI/CD pipelines.

• Risk & Governance: Replace manual audits with Continuous Control Monitoring (CCM). Conduct internal risk assessments and threat modeling tailored to cloud-native, health care environments.

WHAT YOU BRING TO THE ROLE

• 6+ years of professional experience in Security Engineering, GRC Engineering, DevOps, or Cloud Security roles.

• Experience building, scaling, and modernizing compliance programs in fast-paced startup environments.

• Deep, practical understanding of HIPAA requirements and how to map them to technical cloud controls. Strong working knowledge of SOC 2 and HITRUST.

• Hands‑on expertise with Google Cloud Platform (GCP) architecture, IAM, logging, and security best practices.

• Strong programming/scripting skills (e.g., Python, Bash) and experience working with REST APIs to automate evidence gathering.

• Proven experience implementing and maximizing modern continuous compliance tooling.

• Excited about applying technology to improve healthcare.

EXCEPTIONAL LOOKS LIKE

• Experience or familiarity with FedRAMP (Moderate/High), Infrastructure as Code (Terraform), or previous experience in the BioTech/HealthTech industry.

COMP | PERKS | BENEFITS

• $150,000 - $200,000 per year

• Equity in an early stage company

• Medical, dental, and vision insurance

• 401(k)

• Paid maternity / paternity leave

• Unlimited PTO

• Biograph Membership

WHY JOIN US?

Biograph is on a mission to drive meaningful advances in human healthspan and lifespan. We’re not simply focused on helping you live longer, we’re focused on making every year the best it can be. Biograph is an equal opportunity employer offering competitive salaries, comprehensive health benefits, and a people focused culture.

• Innovation at the Core: Work with a forward-thinking team that merges the latest in health technology, data science, and personalized care.

• Collaborative Ecosystem: Work alongside engineers, designers, and clinicians to create groundbreaking solutions that redefine what's possible in healthcare. You will be part of a multidisciplinary team where innovation thrives, and every voice matters, contributing to a culture that values diverse perspectives and bold thinking.

• Impactful Leadership: Be the voice for our members' health journeys, influencing the development of cutting‑edge tools and technologies to enhance their lives.

• Opportunities for Growth: With Biograph, you're not just stepping into a role—you're joining a company where growth and development are prioritized. As we continue to scale and innovate, you will have opportunities to expand your expertise, take on new challenges, and make meaningful contributions to the broader healthcare landscape.

• A Purpose-Driven Mission: At Biograph, we're committed to more than just healthcare—we're focused on changing lives by extending healthspans and improving quality of life through personalized care. If you're passionate about making a tangible difference, this is your chance to be part of something truly transformative.