Staff GRC Engineer (Remote)

About the role

The Staff GRC Engineer will lead the maturing of ezCater's governance, risk, compliance, and data security capabilities. This role requires a deep understanding of security compliance frameworks and the ability to implement controls that fit modern systems.

Responsibilities

• Lead control program maturity

• Shape and define ezCater’s AI Governance strategy

• Define how key controls are implemented, tested, evidenced, and improved over time

• Partner with internal and external audit stakeholders on control design, walkthroughs, exceptions, remediation, and readiness activities

• Build continuous control monitoring and automation

• Expand data security policy and program quality

• Drive clearer documentation, standards, and guidance

• Support day-to-day GRC and assurance work

• Mentor others and improve the team’s ability to handle recurring work

Requirements

• 8+ years of experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment

• Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS

• Experience building or improving data security governance, classification, handling rules, or related control practices

• Familiarity with governing and securing AI/Agentic systems and business processing

• Strong written communication and cross-functional influence skills

• Experience with engineering system guardrails for ensuring compliance utilizing Policy-as-Code (Terraform) or secure configurations of platform systems within cloud hosted environments

• Comfortable balancing strategic design work with operational execution

• Experience with continuous control monitoring, policy-as-code, or GRC platforms and evidence tooling

• Comfortable leveraging AI tooling and automated workflows to increase scale and velocity

Qualifications

• Some experience with scaling a unified control framework across multiple governance and compliance frameworks

• Experience with AI governance or emerging technology risk

Skills

• Strong systems thinker

• Comfortable with ambiguity and able to break down complex governance problems into actionable steps

• Ability to communicate controls, trade-offs, and program expectations to both technical and non-technical audiences

• Experience with automation and scripting to improve compliance and assurance programs

Benefits

Market competitive salary, stock options, 12 paid holidays, flexible PTO, 401K with ezCater match, health/dental/FSA, long-term disability insurance, mental health and family planning resources, remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office, a tremendous amount of responsibility and autonomy, wicked awesome co-workers, employee meal program, and knowing that you helped transform the food for work space.

Pay

The national total target cash compensation range for this position, including base salary and bonus target, is $165,000–$210,000 annually.

Schedule

Flexible work schedule, with the option to work from home or the ezCater office in Boston.