GRC Controls Automation Engineer

Accountabilities:: Design, develop, implement, and automate security and compliance controls, embedding requirements into software development lifecycle (SDLC) processes. Improve existing governance and compliance processes through standardization, automation, and scalable solutions. Advise technical teams on compliance implications of new product features, infrastructure changes, and deviations from established controls. Contribute to cloud and application security strategy, planning, and execution. Assess the organization's security and compliance posture, identify gaps, evaluate emerging trends, and recommend improvements. Support the secure introduction of products and services into production environments by providing compliance and risk guidance. Work across regulatory and assurance frameworks, including ISO, PCI, NIST, and AICPA SOC standards. Maintain accurate process documentation and supporting evidence to facilitate internal and external audits. Communicate control deficiencies to management and coordinate cross-functional remediation activities. Monitor compliance issues, track corrective actions, and follow up to ensure control gaps are resolved. Build trusted relationships with internal teams and external stakeholders, providing clear guidance and ongoing education. Requirements: At least 5 years of professional experience in GRC, information security, or a related function within a SaaS company. Strong understanding of global security and compliance frameworks, including NIST SP 800-53, PCI, ISO 27000-series standards, and SOC 2. Familiarity with Google Cloud Platform (GCP), cloud computing environments, AI architectures, data governance, and model validation. Bachelor's degree in Business, Management Information Systems, or a related field, or equivalent professional experience. Ability to translate regulatory and compliance requirements into practical technical controls and automation solutions. Strong written, verbal, and presentation skills, with the ability to communicate effectively across technical and non-technical teams. Excellent organizational skills, adaptability, and the ability to manage priorities in a fast-moving environment. Proactive, solutions-oriented approach, with strong integrity, accountability, and willingness to take ownership beyond defined responsibilities. Preferred: Professional certifications such as CISSP, CCSK, CISM, or other relevant security and compliance credentials. Benefits: Base salary: $115,500–$145,000 USD, depending on skills, experience, and work location. Equity eligibility. Employee benefits are included as part of the compensation package; specific healthcare, retirement, and leave details are not provided in the source description. Hybrid working arrangement, with at least three days per week in the assigned office. Opportunity to contribute to AI-enabled enterprise technology and help advance scalable security and compliance practices.