Staff GRC Engineer (Remote)

About the role

The Staff GRC Engineer will lead the maturation of ezCater's governance, risk, compliance, and data security capabilities. This role requires a deep understanding of security compliance frameworks and the ability to implement and automate controls in a SaaS and cloud-native environment.

Responsibilities

• Lead control program maturity
• Design and maintain an auditable control framework for SaaS, cloud, data, and engineering environments
• Shape and define ezCater's AI Governance strategy
• Define how key controls are implemented, tested, evidenced, and improved over time
• Partner with internal and external audit stakeholders on control design, walkthroughs, exceptions, remediation, and readiness activities
• Build continuous control monitoring and automation
• Expand data security policy and program quality
• Drive operational quality improvements
• Lead through influence and systems thinking
• Mentor others and improve documentation and knowledge sharing

Requirements

• 8+ years of experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment
• Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS
• Implementation of engineering system guardrails for ensuring compliance utilizing Policy-as-Code (Terraform) or secure configurations of platform systems within cloud hosted environments
• Familiarity with governing and securing AI/Agentic systems and business processing
• Strong written communication and cross-functional influence skills
• Experience building or improving data security governance, classification, handling rules, or related control practices
• Comfortable balancing strategic design work with operational execution
• Experience with continuous control monitoring, policy-as-code, or GRC platforms and evidence tooling

Qualifications

• Strong systems thinker who can break ambiguous governance problems into workable operating models, measurable outcomes, and implementation steps
• Comfortable leveraging AI tooling and automated workflows to increase scale and velocity

Skills

• Strong written communication and cross-functional influence skills
• Experience with continuous control monitoring, policy-as-code, or GRC platforms and evidence tooling
• Familiarity with AI governance or emerging technology risk

Benefits

Market competitive salary, stock options, 12 paid holidays, flexible PTO, 401K with ezCater match, health/dental/FSA, long-term disability insurance, mental health and family planning resources, remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office, a tremendous amount of responsibility and autonomy, wicked awesome co-workers, employee meal program, and more.

Pay

$165,000–$210,000 annually

Schedule

Flexible, remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office