Security Engineer - GRC Frameworks & AI Governance

Job summary

Responsibilities

We are seeking a mid-level Governance, Risk, and Compliance (GRC) Engineer to join our security and AI governance team at SpaceXSI. You will set the standards the organization builds to, design and implement controls, and automate the unglamorous parts of compliance so a fast-moving team can ship…

• Execute security compliance implementation and audits across core frameworks including SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and the EU AI Act, including control…
• Build and maintain Compliance-as-Code and continuous compliance capabilities — policy-as-code, automated control validation, continuous evidence pipelines, and monitoring…
• Operate and extend GRC platforms (e.g., Vanta) as the system of record for controls, evidence, and audit readiness; integrate them with cloud, identity, and engineering tooling…
• Partner with engineering and architecture to embed compliance requirements early in design reviews; translate framework obligations into clear technical control narratives that…
• Develop, maintain, and continuously improve corporate policies, standards, and procedures that support the company's governance and AI management system posture.

What they're looking for

• Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field.
• 3+ years of experience in GRC, security compliance, or technology audit roles with hands-on GRC engineering responsibilities.
• Demonstrated experience implementing and maintaining security compliance frameworks in cloud environments (AWS, GCP, or Azure).
• Expert-level working knowledge of several of the following: SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, and ISO 42001 — including building and running controls, not only reading…
• Experience with Compliance-as-Code practices and GRC automation tooling (e.g., Vanta, Drata, or similar), with a bias toward continuous monitoring.

Tech stack

• AWS
• GCP
• Azure