ButterflyMX
GRC Engineer
About this role
ButterflyMX seeks a GRC Engineer to build and mature the company's governance, risk, and compliance program by automating manual processes and implementing AI-assisted workflows. This individual contributor role reports to the CISO and spans audit management, risk operations, vendor oversight, policy development, and privacy support across a distributed organization.
What you'll do
- Own and modernize the risk register using AI tooling to continuously surface, score, and route emerging risks with minimal manual intervention
- Lead SOC 2 Type II audit management and automate evidence collection in Vanta through continuous monitoring rather than sprint-based processes
- Engineer trust and assurance program with automated questionnaire intake, AI-assisted response generation, and self-service partner due diligence workflows
- Build vendor and supply chain risk program with automated intake, tiered scoring, and continuous monitoring triggers replacing static spreadsheets
- Redesign security and privacy policies using AI for drafting and versioning, with lightweight approval workflows and automated attestation tracking
- Configure common controls monitoring in Vanta with automated alerting and failure detection routed directly to control owners
What they're looking for
- GRC platform administration (Vanta experience preferred)
- Risk management and risk register development
- SOC 2 Type II and compliance audit experience
- Vendor risk assessment and supply chain security
- Security policy development and documentation
- Workflow automation and process engineering
- Privacy and data protection (GDPR, CCPA, DSR handling)
- AI tool integration and prompt engineering
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
ButterflyMX
ButterflyMX builds AI-powered automation platforms to eliminate manual work across governance, risk, compliance, and sales operations. The company is hiring engineers to develop and scale compliance workflows, vendor management systems, and sales productivity tools that drive efficiency through continuous monitoring and intelligent automation.
- Website
- butterflymx.com
Likely interview questions
- Describe your experience managing SOC 2 Type II audits—how have you reduced evidence collection burden?
- How would you approach automating a vendor risk assessment workflow, and what tools or integrations would you prioritize?