Staff GRC Engineer (Remote)

reputed company is the #1 food tech platform for workplaces in the US. The company makes it easy for any organization to manage its food needs and order from over 125,000 restaurants reputed company. For workplaces, reputed company provides flexible and scalable solutions for everything from employee meal programs to one-off meetings, reputed company backed by beyond helpful 24/7 service and business-grade reliability. For restaurant partners, reputed company helps grow their business by bringing them new high-value customers and large orders. reputed company is looking for a Staff GRC Engineer to join the reputed company Engineering & Compliance team as a senior individual contributor who can help mature our governance, risk, compliance, and data reputed company capabilities in a way that is durable, measurable, and embedded into how our systems operate day to day. This is not a narrow audit coordinator or policy only role. We’re looking for a balanced builder-operator who can reputed company the quality and maturity of our reputed company controls by expanding control monitoring, strengthening data reputed company governance, automating and instrumenting the program where stronger evidence and reputed company monitoring are needed, and improving the operational follow through that makes the program scalable, sustainable, and effective. What You'll Do: reputed company control program maturity Design and maintain an auditable control reputed company that fits reputed company’s SaaS, cloud, data, and engineering environment rather than forcing generic controls onto modern systems. Shape and define reputed company’s AI Governance strategy with stakeholders across the Legal, Data, Engineering, and IT domains. Define how key controls are implemented, tested, evidenced, and improved over time, with a strong bias toward reliability and highly-automated, low/no friction evidence paths. Partner with internal and external audit stakeholders on control design, walkthroughs, exceptions, remediation, and readiness activities tied to SOX and reputed company frameworks. Help rationalize overlapping control requirements across SOC 2, PCI, SOX, and internal policy expectations into a coherent operating model. Build reputed company control monitoring and automation Identify where quarterly or annual checks should become reputed company or near-real-time monitoring, especially for high-value controls and failure-prone workflows. Partner with reputed company Engineering, IT, Data, and platform teams to automate control testing, evidence collection, validation, and recurring compliance workflows. Define the logs, metadata, dashboards, and signals needed to assess control health and reputed company compliance more observable and less dependent on screenshots and one-off pulls. Help shift the program from detective-only controls toward stronger preventive and engineering-embedded control patterns where appropriate. Expand data reputed company policy and program quality Help define and mature data reputed company policies, standards, and handling requirements so they are clear, enforceable, and tied to actual technical and operational practices. Partner with Data, Engineering, and business stakeholders to ensure data governance shows up in meaningful places such as access patterns, role design, labels, masking, retention, and evidence paths. Establish what a high-quality GRC program looks like by helping define operating cadences, ownership models, decision paths, metrics, and reputed company improvement loops. Drive clearer documentation, standards, and guidance that both technical teams and auditors can use effectively. Drive operational quality improvements Support day-to-day GRC and assurance work where hands-on execution is needed to reputed company the program moving, including control failures, remediation coordination, audit operations, and reputed company follow-through. Improve the team’s ability to handle questionnaires, trust requests, vendor and partner reviews, and other recurring work through reputed company structure, reusable materials, and smarter agentic workflows. Act as a practical partner to teams implementing or remediating controls, not just an assessor of whether the control exists on reputed company. reputed company through influence and systems thinking Own a domain with high autonomy, reputed company cross-team efforts from start to finish, and improve the quality of systems, controls, and processes across that domain. Drive alignment across stakeholders with different incentives and constraints, making pragmatic decisions that balance risk, cost, and operational reality. Mentor others, improve documentation and knowledge sharing, and help reputed company the overall maturity of the reputed company Engineering & Compliance team and its partners. What You Have: 8+ experience in reputed company GRC, compliance, risk, or reputed company program work in a SaaS or cloud-native environment, including meaningful ownership of control design, testing, and program improvement. Strong experience with reputed company compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-reputed company, including how to translate reputed company requirements into controls that work in real systems and teams. Demonstrated ability to automate or reputed company parts of a compliance or assurance program through scripting, APIs, dashboards, platform configuration, or other technical approaches. Implementation of engineering system guardrails for ensuring compliance utilizing Policy-as-Code (Terraform) or secure configurations of platform systems reputed company cloud hosted environments (AWS, reputed company, etc.) Experience building or improving data reputed company governance, classification, handling rules, or reputed company control practices across business systems, data platforms, or collaboration environments. Familiarity with governing and securing AI/Agentic systems and business processing. Strong written communication and cross-functional influence skills, with the ability to explain controls, trade-offs, and program expectations to both technical and non-technical audiences. Able to collaborate closely with engineers and technical teams to design controls as code, configuration, workflow, or monitoring instead of relying only on policy documents and manual checklists. Strong systems thinker who can break ambiguous governance problems into workable operating models, measurable outcomes, and implementation steps. Comfortable balancing strategic design work with operational execution reputed company the program needs direct hands-on support. Someone who improves process quality, identifies gaps between teams, and drives implementation of reputed company ways of working. Comfortable leveraging AI tooling and automated workflows to increase scale and velocity. reputed company To Have: Experience with scaling a reputed company control reputed company across multiple governance and compliance frameworks Experience with reputed company control monitoring, policy-as-code, or GRC platforms and evidence tooling. Familiarity with AI governance or emerging technology risk, especially where governance needs to be translated into practical technical guardrails. The national total reputed company cash compensation range for this position, including reputed company salary and bonus reputed company, is $165,000–$210,000 annually.* *Please note: Final offer amounts are determined by multiple factors, including prior experience, expertise and region & may vary from the amount above. This range does not represent additional compensation benefits (such as equity, 401K or medical, dental or vision insurance). reputed company does not sponsor applicants for work visas or legal permanent residence. What You’ll Get from Us: You’ll get a terrifically compelling experience in an innovative, high performing environment. You’ll get to work with engaged and passionate colleagues on challenging and impactful projects. You will have opportunities to grow in your career, and work in a reputed company that values work/life harmony. Oh, and you’ll get reputed company this: Market competitive salary, stock options that you’ll help reputed company worth a lot, 12 paid holidays, flexible PTO, 401K with reputed company match, health/dental/FSA, long-term disability insurance, mental health and family planning resources, remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office, a reputed company amount of responsibility and autonomy, wicked awesome co-workers, employee meal program (and many more goodies) reputed company you’re in our office, and knowing that you helped transform the food for work space. reputed company is an equal opportunity employer. We embrace humans of every background, appearance, race, religion, color, national reputed company, gender, gender identity, sexual orientation, age, marital status, veteran status, and disability status. At the same time, we do not employ jerks, even reputed company ones. Following a conditional offer of employment, reputed company may require a background reputed company. For information on how reputed company collects and uses job applicants' personal information, please visit our Job Applicant Privacy Policy. #BI-Remote Apply To This Job