Senior GRC Engineer: Automate Compliance with Code

turing; United States; Remote; USD 210,000 - 240,000; Full time

Job summary

Turing is seeking a Staff GRC Engineer to bring an engineering mindset to governance, risk, and compliance. This senior, hands-on role builds tooling, integrations, and pipelines to turn the control framework into code and provide continuous visibility into the organization’s compliance posture.

The role requires extensive experience across security, GRC, and software engineering, with strong Python/Go skills and a bias for automation.

Qualifications

• Significant experience, typically 8 or more years, spanning security or GRC and software engineering, with a strong hands-on engineering background.
• Strong programming skills in Python, Go, or similar languages, with comfort building integrations against APIs.
• Working knowledge of compliance frameworks such as SOC 2 and ISO 27001, including what evidence and control testing actually require.
• Experience with cloud environments such as AWS, GCP, or Azure, and with infrastructure-as-code.
• Familiarity with GRC or compliance automation platforms and continuous controls monitoring concepts.
• Ability to lead cross-team initiatives and translate effectively between compliance and engineering.

Responsibilities

• Build and operate compliance automation, including continuous controls monitoring, automated evidence collection, and control testing across cloud and corporate systems.
• Implement compliance-as-code and policy-as-code so controls are defined, versioned, tested, and enforced programmatically.
• Integrate GRC tooling with the systems that hold the evidence, such as cloud providers, identity providers, ticketing, CI/CD, and HRIS, via APIs.
• Build dashboards and reporting that give real-time visibility into control health, drift, and audit readiness.
• Reduce audit burden by automating the collection and packaging of evidence for SOC 2, ISO 27001, and other frameworks.
• Partner with GRC analysts and risk owners to translate control requirements into technical checks and remediation workflows.
• Automate access reviews, risk assessments, and vendor risk workflows.
• Set engineering standards for the GRC function and mentor analysts and engineers on automation.

Skills

Python

Go

APIs

GRC

Continuous monitoring

Tools

AWS

GCP

Azure

Terraform

OPA

Job description

Turing is seeking a Staff GRC Engineer to bring an engineering mindset to governance, risk, and compliance. This senior, hands-on role builds tooling, integrations, and pipelines to turn the control framework into code and provide continuous visibility into the organization’s compliance posture.

The role requires extensive experience across security, GRC, and software engineering, with strong Python/Go skills and a bias for automation.