GRC Engineer

Verkada is transforming how organizations protect their people and places with an integrated, privacy-sensitive AI-powered platform that includes solutions for video security, access control, air quality sensors, alarms, intercoms, and visitor management. With more than 30,000 customers (including 100+ of the Fortune 500), a $5.8B valuation, and over $1 billion in annualized bookings, Verkada is at the center of the Physical AI revolution.

About The Role

Build and lead the GRCA (Governance, Risk, Compliance, and Assurance) function within Verkada’s Security Team. Manage risks, scale compliance programs, and curate security practice information for customers. This role is critical to meeting sophisticated security and compliance expectations that directly impact revenue and risk management as Verkada expands globally.

Responsibilities

• Work cross-functionally with Security, IT, Engineering, Product, and Legal to provide guidance on security controls implementation, including effectiveness, implementation, and automation.
• Research, build, and maintain tooling for testing and continuous monitoring of security controls across platforms such as AWS and GitHub.
• Maintain the roadmap for continuous security compliance across Verkada’s Corporate, IT, and Product environments, increasing automation coverage.
• Assist in developing and maintaining company-wide security policies, procedures, and plans, and support communication of best practices to internal stakeholders.
• Communicate progress, escalations, and issue resolution to management and team stakeholders.
• Create procedural documentation, including training materials and process documentation.
• Build relationships across Verkada to accomplish program objectives and further GRC goals.
• Implement and oversee corrective action plans for security compliance issues.
• Perform annual security risk assessments and prepare risk treatment plans.
• Conduct vendor security assessments to evaluate risks and security postures of third-party vendors.
• Manage the Security Exception Process to track exceptions, approvals, and automation improvements.
• Maintain the FAQ for customer questionnaires as part of the assurance program.
• Collaborate on Business Impact Assessments (BIA) and annual BCP/DR activities.
• Leverage AI and automation to scale GRCA functions.
• Work closely with internal and external auditors to achieve continuous compliance over the technology control environment.

Requirements

• Outstanding written and spoken communication skills.
• Ability to autonomously accomplish outcomes across cross-functional teams in ambiguous situations.
• Ability to multitask, prioritize work, and meet deadlines in a fast-paced environment.
• Experience with AWS or another cloud service provider.
• Prior experience with software companies’ compliance.
• Experience with audits, risk, and compliance (SOC 2, ISO 27001, etc.) for cloud software products.
• 7+ years of security/IT compliance or equivalent experience.
• Must be willing and able to work onsite five days per week.

Skills

• Bonus: Experience with scripting languages such as Python, JSON, etc.
• Bonus: Prior experience automating audit evidence collection.

Benefits

• Comprehensive healthcare programs tailored to personal needs—100% premium coverage for employees and 80% for family premiums.
• Nationwide medical, vision, and dental coverage.
• Health Savings Account (HSA) with annual employer contributions and Flexible Spending Account (FSA).
• Expanded mental health support.
• Paid parental leave policy and fertility benefits.
• Paid holidays, firmwide extended holidays, flexible PTO, and personal sick time.
• Professional development stipend.
• Wellness and fitness benefits.
• Healthy lunches provided daily.
• Commuter benefits.

Pay

Estimated Annual Pay Range: $200,000—$250,000 USD (includes base compensation and commissions, if applicable).

Verkada sponsors and takes over sponsorship of employment visas for this role. If an offer is made, we will make every reasonable effort to secure a visa.