GRC Engineer

GRC Engineer at Applied Intuition who runs day-to-day governance, risk and compliance, from risk assessments and the risk register to continuous compliance and third-party security reviews. The engineer owns the vendor risk lifecycle from intake and tiering to assessment and monitoring, builds automated control monitoring and evidence collection for constant audit readiness, administers GRC platforms such as Vanta, Drata or OneTrust, supports AI governance under ISO 42001 and NIST AI RMF, and keeps security policies current.

Applied wants five to eight years in security GRC or compliance program ownership, an active certification such as CISSP, CISA or CISM, experience with frameworks such as ISO 27001, SOC 2, TISAX or NIST CSF, and a record of building GRC automation with AI agents or scripts. On site in Sunnyvale.