Senior Software Engineer, GRC

Team Description

The Privacy and Compliance Engineering team is responsible for preparing Reddit’s platforms for evolving regulatory requirements. We’re building products that establish the foundation of trust in the Reddit platform, while partnering closely with teams across the company to ensure our platforms and features meet the highest standards. Engineers on this team will thrive in dynamic, ambiguous problem spaces and work across multiple domains and technology stacks.

Role Description

We’re hiring a GRC Software Engineer to build and improve the software that supports Reddit’s security and compliance programs. You will design, implement, and maintain integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. Working closely with engineering and business partners, you’ll translate requirements into reliable tools that surface issues early and reduce manual work. You’ll own projects from discovery through launch, make clear technical trade-offs, and establish sustainable support with engineering partners.

How You’ll Have Impact:

This role will make Reddit’s compliance programs more effective and scalable by building systems that help teams address requirements early and automate recurring assurance work. You’ll work with engineers and control owners to define clear requirements, deliver practical solutions, and follow through after launch. Your work will improve how controls operate, make evidence more timely and reliable, and surface gaps sooner. Success means dependable systems that teams continue to use, less manual work, faster remediation, and clearer visibility into risk.

What You’ll Do:

• Own software projects from discovery through launch: work with partners to define the problem, agree on success measures, make technical trade-offs clear, deliver the solution, and follow through on results.
• Lead efforts to automate evidence collection across key systems in scope for SOX and other compliance requirements. Work with control owners and system teams to define evidence requirements, build and validate integrations, monitor failures, and establish ongoing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems. Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance.
• Design data models that connect risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality.
• Build automated checks that detect missing, stale, inconsistent, or out-of-policy data, and route actionable failures to the right owners.
• Turn control requirements and audit requests into data specifications, testable checks, and exception logic. Partner with control owners to validate system scope and resolve gaps.
• Build strong working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance. Learn how their systems operate and deliver tools, monitoring, and runbooks they can rely on after launch.

Role Requirements:

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by other people or operational workflows.
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services; GCP experience is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and the runbooks needed to support an integration after launch.
• Practical knowledge of security and compliance controls, including how requirements translate into system design, evidence, testing, and remediation. Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
• Demonstrated ability to earn trust and influence without authority by listening carefully, making risk and technical trade-offs clear, reducing partner burden where possible, addressing concerns directly, and following through on commitments. You can independently own complex projects from discovery through launch and measurable results. 

Benefits:

• Comprehensive Healthcare Benefits and Income Replacement Programs
• 401k with Employer Match
• Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
• Family Planning Support
• Gender-Affirming Care
• Mental Health & Coaching Benefits
• Flexible Vacation & Paid Volunteer Time Off
• Generous Paid Parental Leave