GRC Engineer

Job not on LinkedIn

🔥 14 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚔 Compliance

👻 Ghost score 15%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Aegis AI Security

WebsiteLinkedInAll Job Openings

1 - 10 employees

🔒 Cybersecurity

🤖 Artificial Intelligence

☁️ SaaS

Cybersecurity • Artificial Intelligence • SaaS

Aegis AI Security is an AI-native email security company that uses orchestrated AI agents to detect and stop phishing, business email compromise (BEC), malware, and zero-day email threats in real time. The platform deploys via API to Google Workspace and Microsoft 365 with no MX record changes, offering rapid integration, automated triage and remediation, low false positive rates, and enterprise-grade reporting and compliance (SOC 2 Type II). Aegis positions itself as a SaaS solution for security teams, reducing alert fatigue and manual rule management by replacing brittle rule-based Secure Email Gateways with self-learning, agent-driven detection and response.

📋 Description

• Own the compliance program end to end and keep it audit-ready year-round • Run the auditor relationship • Prepare the company for future customer-requested certifications and frameworks • Maintain the risk register, advance risk treatments, and keep the risk picture accurate • Maintain policies, standards, and procedures as the company scales • Maintain and exercise business continuity, disaster recovery, and incident response plans and playbooks • Own customer notification commitments and ensure stakeholders understand their roles • Manage customer security questionnaires and third-party risk management reviews end to end • Expand the answer library for accurate, consistent, and fast responses • Review vendors, maintain DPAs and the subprocessor list, scale third-party risk management, and handle customer data requests • Map controls across industry frameworks and maximize reuse of evidence • Automate evidence collection through APIs and scripts • Work directly with the head of security, engineers, and customers • Advance AegisAI's security program for its AI-attack defense business

🎯 Requirements

• 4+ years in GRC, security compliance, or audit at a SaaS company • Must have run a SOC 2 Type II end to end at least once • Experience answering enterprise security questionnaires • Clear written communication sufficient to close security-review threads • Technical ability to read architecture diagrams and evaluate whether controls exist in practice • Scripting experience in Python or similar • Comfortable working with APIs • Working knowledge of major privacy regimes and their implications for a data processor • Organized, self-directed, and honest about knowledge gaps • ISO 27001 implementation or certification experience preferred as a bonus • Compliance automation platform experience, especially custom tests and APIs, preferred as a bonus • AI governance exposure, including ISO 42001 or NIST AI RMF, preferred as a bonus • Experience building or testing BC/DR for a production SaaS preferred as a bonus • Privacy certification such as CIPP preferred as a bonus • Experience working at a security vendor preferred as a bonus

🏖️ Benefits

• Flat, flexible, and fast culture • Clear KPIs for success with autonomy over how to achieve them