Sr. GRC Engineer

Helps shape Pendo's governance, risk and compliance program as a senior engineer on the Information Security team, which covers security operations, product security, and compliance and risk. The role runs at least one compliance program from start to finish, for example SOC 2 Type II, FedRAMP, PCI-DSS or ISO 27001, handling control design, evidence, auditors and remediation, and runs organisational risk assessments that it presents to leadership in business terms. It also leads response to complex security incidents and uses AI tools to speed up evidence gathering, policy work and control testing.

Pendo wants three to five years of hands-on security work with real ownership of compliance or operations, deep knowledge of at least two major frameworks, end-to-end audit experience and incident investigation skills. Based in the Raleigh office.