Sr. Security Engineer - GRC Frameworks & AI Governance

Written by the T&S Network from SpaceXAI's posting.

GRC engineering for security and AI governance compliance at a company building AI models and products. The role owns the compliance posture as the organization grows, setting the standards teams build to and automating control validation and evidence so engineering can ship without losing audit readiness.

What you'd do

• Build policy-as-code, automated control validation, and continuous evidence pipelines wired into development and deployment workflows.
• Operate and extend GRC platforms such as Vanta as the system of record for controls and evidence, integrating them with cloud, identity, and engineering tools.
• Embed compliance requirements into design reviews and translate framework obligations into technical control narratives for auditors.
• Identify and prioritize AI/ML, cybersecurity, privacy, IP, and cloud risks, and lead risk reviews for new models, products, and features.
• Manage relationships with external auditors, assessors, and regulators, acting as the bridge to internal teams.

What it asks for

• 8+ years in GRC, security compliance, or technology audit with hands-on GRC engineering work.
• Experience running security compliance frameworks in AWS, GCP, or Azure.
• Experience with Compliance-as-Code and GRC automation tools such as Vanta or Drata.
• 10+ years of security compliance or GRC engineering experience (preferred).
• Hands-on technical controls work in IAM, logging, encryption, and CI/CD compliance checks (preferred).

Worth knowing

• Role requires U.S. citizenship, green card, refugee, or asylee status, or eligibility for State Department authorization under ITAR.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on SpaceXAInorth_east before you apply. If we got something wrong, report this listing.