GRC Engineer
Clerk · Remote · Remote ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior GRC Engineer
- Fully remote
- SOC 2 & HIPAA focus
- Automation heavy
- Equity included
Join Clerk's Security Team to own the governance, risk, and compliance program that supports customer vendor reviews. You will build automations and internal tools to enforce policies, gather evidence, and streamline audits like SOC 2 and HIPAA.
What you'll do
- Manage SOC 2 Type II and HIPAA programs end to end
- Lead scoping for new frameworks like ISO 27001
- Build integrations between cloud providers and GRC platforms
- Implement policy-as-code and config drift detection
- Run vendor security review and questionnaire workflows
- Maintain risk register and conduct risk assessments
- Embed compliance checks into SDLC and change management
What you'll need
- 5+ years in security with GRC automation experience
- Technical ownership of SOC 2 Type II or ISO 27001 audits
- Proficient in coding and using LLMs for productivity
- Experience with GRC platform APIs beyond dashboards
- Deep knowledge of Cloud IAM, preferably on GCP
- Ability to define sufficient evidence for auditors
- Strong writing skills for policies and customer answers
Nice to have
- Previous experience at an all-remote company
- Shipped LLM or agentic workflows for compliance
- Background in developer-tools companies
Stack
- GCP
- SOC 2
- HIPAA
- ISO 27001
- LLMs
How you'll work
- Globally distributed team
- Remote work environment
What you get
- Competitive salary package
- Equity ownership via stock options
- Top-tier health insurance coverage
- Home office gear allowance
- Flexible unlimited vacation policy
- Observance of local national holidays