Senior GRC Engineer - AI-Powered Compliance Architecture

Playlist; San Luis Obispo (CA); Vor Ort; USD 150.000 - 170.000; Vollzeit

Zusammenfassung

Playlist is seeking a Senior GRC Engineer to lead the architecture of its control environment across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53. You will design cross-framework mappings and manage evidence across multiple brands to streamline audits and ensure durable, auditable controls.

You will drive AI-powered GRC tooling, build scalable agentic workflows, and collaborate with Security, Legal, and Finance to translate complex compliance requirements into actionable engineering

Qualifikationen

• 6+ years of experience in security engineering, GRC, or compliance engineering.
• Deep working knowledge of PCI DSS, SOC 1 or SOC 2, HITRUST, and at least one ISO 27001 or NIST CSF/800-53.
• Experience designing or maintaining cross-framework control architectures across multiple compliance standards.
• Hands-on experience managing evidence requirements and control implementation, not just documentation.
• Proficiency with compliance automation tooling (Optro, Drata, Vanta, Hyperproof, Anecdotes, or similar).
• Ability to translate technical control design into clear implementation guidance for engineering and product teams.
• Experience building or operating agentic AI workflows (LLM-based pipelines, multi-agent systems, RAG architectures) in production.

Aufgaben

• Design and build framework crosswalks and control mappings across PCI DSS, SOC 1 Type II, ISO 27001, HITRUST, and NIST CSF/800-53, using languages such as OSCAL as the translation layer to preserve framework-specific requirements while reducing duplicate audit burden
• Own the Master Control List end-to-end, including control nomenclature, relational database architecture, evidence linkages, and the operational model for ongoing maintenance across Playlist's multi-brand footprint
• Manage the full lifecycle of controls, evidence requirements, and implementation as new standards are adopted, requirements change, or acquired entities are brought into scope
• Drive evidence automation in GRC tooling, building collection workflows that scale without turning every audit season into a manual sprint
• Partner with Security Engineering, Legal, and Finance to validate that control design reflects how the business operates, translating compliance requirements into implementation guidance that engineering teams can act on
• Design, build and maintain AI-powered GRC tooling, multi-agent pipelines for risk quantification, evidence automation, vendor risk assessment, and compliance monitoring using cloud native tools and APIs, so the team's analytical and operational capacity scales without scaling headcount
• Identify rationalization opportunities across frameworks, so adding a new standard to the portfolio means incremental work, not starting from scratch

Kenntnisse

Security/GRC experience

Regulatory frameworks knowledge

Control frameworks design

Evidence management

Compliance automation tools

Tech-to-implementation translation

AI workflows in production

Tools

Optro

Drata

Vanta

Hyperproof

Anecdotes

Jobbeschreibung

Playlist is seeking a Senior GRC Engineer to lead the architecture of its control environment across PCI DSS, SOC 1/2, ISO 27001, HITRUST, and NIST CSF/800-53. You will design cross-framework mappings and manage evidence across multiple brands to streamline audits and ensure durable, auditable controls.

You will drive AI-powered GRC tooling, build scalable agentic workflows, and collaborate with Security, Legal, and Finance to translate complex compliance requirements into actionable engineering