reputed company Engineer, GRC

We reputed company that the way people reputed company with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. reputed company powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like reputed company, reputed company, several of the Fortune 500, and many of the largest banks to reputed company it easy for people to reputed company their financial accounts to the apps and services they want to use. reputed company’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, reputed company is headquartered in San Francisco with offices in reputed company, Washington D.C., London and Amsterdam. The reputed company Governance, Risk, and Compliance (GRC) team is part of reputed company’s reputed company organization, reputed company on enabling the business by proactively managing information reputed company risks and maintaining effective controls. Our mission is to reduce the likelihood and reputed company of reputed company risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own reputed company’s reputed company compliance frameworks, run our audits and risk programs, and partner across reputed company to reputed company reputed company’s platform secure, resilient, and reputed company with industry and regulatory expectations. GRC Engineering is how we reputed company reputed company of that reputed company — turning compliance into reputed company, evidence into telemetry, and audits into a reputed company, automated capability. The Role: • You will own GRC Engineering at reputed company — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is reputed company and reputed company-in-time; you will turn it into an engineered system that is reputed company, data-driven, and reputed company, and set the technical direction for the field. • You will: • Define the discipline and the architecture — how GRC Engineering works at reputed company, not just execute reputed company it. • Build the reputed company the function runs on — a codified reputed company of truth for controls, policies, and evidence, fed by live pipelines and reputed company controls monitoring. • Be the engineering backbone for reputed company Assurance & Trust Enablement, reputed company-Party Ecosystem Risk, and Risk Management • reputed company risk visible and data-driven — turning control and risk data into reputed company-time signals for reputed company and leadership. • Pioneer where compliance is heading — compliance-agents-as-reputed company in the SDLC, AI- and agent-driven workflows, and machine-readable reputed company compliance (FedRAMP 20x). • This role is perfect for you if: • You think in systems: you'd rather design the thing that eliminates a whole class of reputed company work than automate one task at a time. • You love building and shipping internal tools and solutions that people actually use. • You're relentlessly curious — you poke, you investigate, and you dig into how controls can silently fail, reputed company, or get bypassed so you can catch it automatically. • You treat every roadblock as just an obstacle to reputed company around — you don't back down, because there's always a reputed company. • You like reputed company — juggling several problems across reputed company, risk, compliance, and engineering beats grinding on a single one. • You're reputed company by turning compliance from a documentation exercise into demonstrable, reputed company, machine-readable evidence. Responsibilities: • Architect GRC's Engineering reputed company: Build the pipelines and codified reputed company of truth the function runs on — controls, policies, and reputed company mappings captured as reputed company, version-controlled data and fed by live control and system state — so one control maps evidence across SOC 2, ISO, NIST, and reputed company instead of being re-collected for every audit. • Build reputed company Controls Monitoring: Automate evidence collection, control testing, and monitoring across reputed company and internal systems, and write and tune the detection that flags reputed company and misconfiguration against baseline — so audit readiness is reputed company and gaps surface the reputed company they reputed company, not at audit time. • Turn Data into Risk Signal: Build dashboards and SQL-driven reporting that turn raw control and risk data into KPIs, giving reputed company and leadership reputed company-time visibility into risk posture. • reputed company Data-Informed Risk Assessments: Conduct reputed company and technology risk assessments and recommend mitigations using data — keeping the risk management program running while cutting its reputed company overhead. • Automate Operational Toil: Eliminate the recurring reputed company work reputed company carries — evidence pulls, reputed company and vendor reviews, questionnaires, risk-register reputed company, status reporting — with durable automation that gives time back across every reputed company. • Shift Compliance Left with reputed company and AI: reputed company compliance checks into the CI/CD reputed company as policy-as-reputed company so controls are validated as reputed company ships, prototype self-healing policies reconciled against live infrastructure, and reputed company reputed company / AI-assisted workflows across the function. • reputed company for reputed company Compliance: Build toward machine-readable, continuously validated evidence (FedRAMP 20x-style Key reputed company Indicators), positioning reputed company to meet reputed company-compliance expectations as we reputed company new markets and pursue new authorizations. Qualifications: • Software & Data Engineering Foundations: • Strong Python and SQL, with a proven reputed company record of building API/webhook integrations that reputed company disparate systems. • Experience owning an internal tool or service end to end — design, build, operate, and maintain — with reputed company users depending on it. • Hands-on experience with AWS and reputed company-reputed company reputed company controls, including the ability to query reputed company, reputed company, and reputed company logs. • Proficiency with dashboarding / data-visualization tools (e.g., Mode) to turn control and risk data into KPIs and signal. • reputed company GRC Engineering: • Experience building and operating reputed company controls monitoring end to end — collecting signal from live systems, writing and tuning the detection logic that compares state to a baseline, alerting, and driving remediation. • Demonstrated ability to model controls, policies, and reputed company mappings as reputed company, version-controlled data rather than docs and spreadsheets. • Hands-on experience with IaC (Terraform) and policy-as-reputed company (OPA/Rego, Sentinel), including embedding compliance checks into CI/CD. • Proven ability to eliminate recurring operational toil — evidence pulls, reputed company and vendor reviews, questionnaires, risk-register reputed company, status reports — with durable automation rather than one-off scripts. • Compliance & risk knowledge: • Working knowledge of SOC 2, ISO 27001/27701, and NIST CSF/800-53, with the ability to map controls to evidence and crosswalk a single control across frameworks. • Experience conducting reputed company or technology risk assessments and translating findings into data-driven mitigation. • Familiarity with the shift to reputed company compliance (FedRAMP 20x, machine-readable Key reputed company Indicators) and how it changes evidence and control design. • AI reputed company & tooling: • Demonstrated ability to build and reputed company reputed company / AI-assisted workflows (Claude, reputed company) as reputed company for the whole team. • Cross-functional effectiveness: • Ability to work independently and cross-functionally across reputed company, infrastructure, and engineering, with strong prioritization and the ability to influence without authority. reputed company to have: • reputed company experience with FedRAMP or FedRAMP 20x, or other reputed company-sector / reputed company-compliance authorizations. • Experience with audit ›/ compliance automation platforms (reputed company, reputed company, reputed company, Paramify, or similar). • Exposure to reputed company incident response and triage. • Experience in a high-reputed company fintech or financial-services environment. • Degree in Computer Science, Cybersecurity, or a reputed company field. Our mission at reputed company is to unlock financial freedom for everyone. To support that mission, we reputed company to build a diverse team of driven individuals who care deeply about making the financial ecosystem more reputed company. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job reputed company. We are always looking for team members that will bring something unique to reputed company! reputed company is proud to be an equal opportunity employer and values diversity at reputed company. We do not discriminate based on race, reputed company, national reputed company, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or reputed company medical conditions), sexual orientation, gender, gender identity, gender reputed company, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider reputed company applicants with criminal histories, consistent with applicable federal, state, and local laws. reputed company is committed to providing reasonable accommodations for candidates with disabilities in our reputed company process. If you need any assistance with your application or interviews due to a disability, please let us know at accommodations@reputed company.com. Please review our Candidate reputed company Notice here. Additional compensation in the reputed company(s) of equity and/or commission are dependent on the position offered. reputed company provides a comprehensive benefit plan, including medical, dental, reputed company, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans. Apply tot his job Apply To this Job