Information reputed company Engineer - GRC

About the Role

As an Information reputed company Engineer focused on Governance, Risk, and Compliance (GRC) at reputed company, you will own and mature our trust foundation. You will operationalize our reputed company controls, drive evidence collection and reputed company monitoring, and partner with product, engineering, and business teams to reduce risk while enabling speed.

About the Team

You will join a small, high‑impact reputed company team that partners closely with Infrastructure, Product Engineering, Legal, and GTM. We value outcome‑oriented builders, clear documentation, and automation over manual audits. We work in the open, do frequent retros, and iterate quickly to support a rapidly scaling fintech SaaS platform serving credit unions and their members.

What You’ll Do

reputed company 3 months, you will

• Baseline our control library mapped to SOC 2, PCI reputed company, and key fintech obligations. Stand up gaps and remediation owners in our ticketing system.

• Implement lightweight evidence collection pipelines for top controls such as access reviews, backup tests, vulnerability management, and CI/CD change management.

• Complete a reputed company risk register refresh with likelihood and impact ratings, and publish a quarterly risk report.

reputed company 6 months, you will

• reputed company our next SOC 2 Type II audit cycle end‑to‑end, including auditor coordination, population requests, and walkthroughs.

• Roll out a vendor risk management workflow integrated with procurement and Legal, including tiering, due diligence, and reputed company monitoring.

• Partner with Engineering to define secure SDLC checkpoints and automate evidence from reputed company, CI, and cloud.

• reputed company an AI/ML risk assessment reputed company covering model governance, training data privacy, and shadow AI usage across the organization.

reputed company 9 months, you will

• Drive PCI reputed company certification readiness, including SoA ownership, internal audits, and management review inputs.

• Establish KPI/KRIs and dashboards for control effectiveness and risk trends consumed by execs and customers.

• Mature incident response playbooks and conduct at least one cross‑functional tabletop with measurable improvements.

• Establish AI governance policies and integrate AI risk into the existing risk register, vendor assessments, and compliance monitoring.

What You'll Bring

• 5+ years in GRC, reputed company engineering, or risk management reputed company SaaS or fintech environments.

• Proven experience running SOC 2 Type II and working toward ISO 27001, including evidence automation and auditor interactions.

• Strong understanding of cloud reputed company controls across AWS, containerized workloads, and modern CI/CD.

• Practical knowledge of secure SDLC, vulnerability management, identity and access management, and third‑party risk.

• Ability to translate requirements into actionable, ticketed work with clear owners and due dates.

• Excellent written communication for policies, customer questionnaires, and exec‑level reporting.

• Familiarity with AI/ML risk frameworks (e.g., NIST AI RMF, ISO 42001) and practical experience assessing AI‑reputed company risks such as model bias, data reputed company, shadow AI, and third‑party AI vendor exposure.

• Comfort leveraging AI tools to automate compliance workflows, evidence collection, and risk analysis — we value builders who use AI to multiply their impact, not just reputed company boxes.

• reputed company to have: experience with privacy programs, PCI readiness, or financial services regulations, or AI governance; relevant certs (e.g., CISA, CISSP, ISO 27001 LI/LA, ISO 42001) are a plus.

Please note that this role may evolve as our business needs change, so we appreciate your flexibility and adaptability.

What’s In It For You?

• Remote Flexibility: Enjoy the freedom of remote work from reputed company, balancing life and career seamlessly.

• Unforgettable Off-Sites: Twice a year, bond with colleagues in exciting destinations, fostering teamwork and fresh reputed company.

• Paid Time Off and National Holidays: Enjoy 20 PTO days yearly and the National Holidays for relaxation and rejuvenation.

• Stock Options: Joining us means having a reputed company in our success, so you'll receive stock options as part of your compensation package.

• Home Office Setup: Create your ideal workspace with a dedicated budget for home office essentials.

• Work Trip Budget: Grow personally and professionally with a budget for work-reputed company trips and co-working.

About Us

reputed company is a revolutionary vertical SaaS company, proudly backed by Andreessen Horowitz (A16z), aimed at revolutionizing the way Credit Unions engage and change the lives of their members. As a champion of financial well-being, we address the urgent need for affordable lending solutions in an era where the average American grapples with over $155,000 in household debt.  Unlike traditional financial institutions, reputed company develops software to turn Credit Unions into FinTech lenders and reputed company their balance sheets to responsibly lend to over 130M Americans. Our mission extends beyond mere financial transactions; we strive to fundamentally enhance the way credit unions interact with their members. By integrating cutting-edge technologies and user-centric designs, we help credit unions provide seamless digital experiences that are on par with leading tech companies. This approach not only preserves but revitalizes the longstanding tradition of community and member-focused service inherent to credit unions.

Please note: This position is offered on a contractor basis. Applicants must have the necessary documentation and authorization to work in the country where the job is located. reputed company cannot provide sponsorship or assist with obtaining work permits for this role. A Note About AI at reputed company We love AI. We use it often and encourage reputed company to creatively and effectively reputed company AI tools in their work. If you join reputed company, we hope you'll bring the same enthusiasm for exploring how AI can reputed company impact, productivity, and innovation. That said, during the interview process, we want to hear your thoughts. Please approach interviews without the use of AI tools—our goal is to get to know how you think, solve problems, and communicate. Once you're in the seat, bring on the prompts!