GRC Engineer
Department:
Job Summary
The stakes are real the talent is insane and somehow its a genuinely lovely place to work. We all pull our weight go the extra mile and put in the bit of magic most companies dont have time for all while having fun and never taking ourselves too seriously.
Weve raised $100 million from Index Ventures Insight Partners and Point Nine and were growing fast. Theres never been a better time to join.
The role in one line
Being a GRC Engineer at means turning compliance from spreadsheets and screenshots into something that just runs so can you prove it gets answered before anyone asks.
What that looks like day to day
Our GRC programme is young and Slack is our system of record. Youll make it scale using AI-powered tooling and workflows to take the toil out of audits evidence collection and customer questions.
Right now that means:
ISO 27001. Its in progress and youll help raise the bar and get us over the line.
ISO 42001. We build AI products so we want to manage AI your first two quarters or so youll run a gap assessment against the standard.
Dogfooding. We use for our own security work and youll drive product improvements that make GRC less painful for our customers too.
Youll work closely with the wider security team engineering legal and product.
Who you are
Youve run or contributed to a real compliance programme ideally ISO 27001 and you know what it takes to get through an audit.
Youd rather automate evidence collection than chase people for screenshots.
You write code (Python Go or similar) or build workflows and youre excited about using AI and agents to remove toil.
You can answer customer security questionnaires quickly accurately and in plain English.
You can explain a control to an engineer and a risk to an executive and both come away knowing what to do next.
You care about the product and youll tell us whats missing from our own GRC tooling.
Youre comfortable with high autonomy. Nobodys going to hand you a detailed spec youre trusted to figure out what needs doing and just do it.
Bonus points for ISO 42001 or AI governance experience SOC 2 GDPR or time in a fast-growing SaaS company.
Supporting you
We work hard and we think life outside work matters just as much. Our benefits pack is built to support both.
Private medical insurance. Seriously good cover - we want you and the people you love to be looked after.
Competitive annual leave. Showing up at your best requires switching off and we make sure you have time to do that.
First Friday of every month off. Yes seriously.
Enhanced pension. We put real money in because future-you deserves better than an afterthought.
Meaningful equity. Were rapidly scaling and everyone who helps shape the outcome should share in it.
Unlimited AI spend. For everyone not just engineers. Were all-in on AI across the company and we expect you to be too.
Generous parental leave. The early days with a new baby matter more than anything were doing here and we want you to be present for them.
Two budgets that have your back. 1000 to invest in your setup 500 a year to invest in yourself.
Required Experience:
IC
About Company
From the first alert to the final follow-up, incident.io integrates on-call, incident response, and status pages into one powerful incident management platform.