Senior GRC Engineer: Automate Controls & Security

Visa Hunt; San Francisco (CA); Hybrid; USD 153,600 - 192,000; Full time

Job summary

Brex is seeking a Senior GRC Engineer to bridge governance, risk, and compliance with security engineering. You will automate controls, build integrations between security tools and GRC platforms, and scale our trust program as Brex expands into new markets.

Based in San Francisco in a hybrid role, you’ll work with engineering, infrastructure, and product teams to translate regulatory requirements into technical solutions, implement automated testing, and deliver dashboards & metrics that show

Qualifications

• 5+ years of experience in GRC, IT governance, or security engineering with a strong track record of automating manual compliance workflows.
• Deep experience with SOC 2, PCI DSS, ISO 27001, and NIST CSF, specifically within cloud-native environments.
• Technical proficiency in Python (or similar scripting languages) and experience building integrations using APIs to connect security tools with GRC systems.
• Builder mindset with the ability to design and implement automated control testing, continuous monitoring, and data-driven security metrics.
• Exceptional cross-functional collaboration and communication skills. You can translate complex compliance requirements into technical specifications that engineering teams can actually implement and influence stakeholders across technical and non-technical domains.

Responsibilities

• Manage and scale IT infrastructure, services and tooling
• Work with a diverse group of IT partners to optimize our provided services
• Implement new services in support of Information Technologies vision
• Scale our services by implementing configuration as code via Terraform providers or APIs
• Operationalize and upskill IT and its partners by producing documentation and leading training sessions
• Evangelize best practices both internally and externally facing

Skills

GRC Engineering

Security Automation

Python scripting

Cross-functional collaboration

Cloud security

Tools

Terraform

APIs

SOAR platforms

Tines

Job description

Brex is seeking a Senior GRC Engineer to bridge governance, risk, and compliance with security engineering. You will automate controls, build integrations between security tools and GRC platforms, and scale our trust program as Brex expands into new markets.

Based in San Francisco in a hybrid role, you’ll work with engineering, infrastructure, and product teams to translate regulatory requirements into technical solutions, implement automated testing, and deliver dashboards & metrics that show