Senior GRC Engineer — AI-Driven Security & Compliance

Pendo.io; Raleigh (NC); Híbrido; USD 133 000 - 160 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

401(k) match

Equity

Flexible time off

Competitive benefits

Resumo da oferta

Pendo seeks a Sr. GRC Engineer to drive governance, risk, and compliance in a security-focused, AI-driven environment. You will lead complex programs, own audits, and translate risk into business terms while partnering with engineering and product teams to bake security into daily operations.

Based in Raleigh, NC, you’ll contribute to strategic roadmaps, manage auditor relationships, and advance durable controls across SOC 2, ISO 27001/42001, PCI-DSS, and FedRAMP variants.

Qualificações

• 3–5 years leading compliance programs or security operations.
• Hands-on ownership of audits with independent auditor liaison.
• Experience guiding incident response from triage to remediation.
• Ability to translate security risk into business decisions.
• Active use of AI tools to accelerate security workflows.
• Strong written and verbal communication across engineering, auditors and leadership.
• Deep knowledge of multiple frameworks (SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, NIST).

Responsabilidades

• Lead AI-driven compliance and policy documentation efforts.
• Define and execute security program strategy and roadmaps.
• Own one or more regulatory programs end-to-end (SOC 2, ISO, PCI-DSS, GovRAMP, FedRAMP).
• Conduct risk assessments and present prioritised recommendations.
• Lead incident response for complex security events and document actions.
• Collaborate with engineering, product and IT to embed security in operations.

Conhecimentos

Security program ownership

Audit management

Incident response leadership

Risk translation to business terms

AI tooling in security workflows

Strong communication

Security frameworks knowledge

Ferramentas

Vanta

Drata

Archer

Descrição da oferta de emprego

Pendo seeks a Sr. GRC Engineer to drive governance, risk, and compliance in a security-focused, AI-driven environment. You will lead complex programs, own audits, and translate risk into business terms while partnering with engineering and product teams to bake security into daily operations.

Based in Raleigh, NC, you’ll contribute to strategic roadmaps, manage auditor relationships, and advance durable controls across SOC 2, ISO 27001/42001, PCI-DSS, and FedRAMP variants.