Verkada
GRC Engineer
About this role
Lead Verkada's GRC (Governance, Risk, and Compliance) function to build scalable, automated programs that manage security controls, compliance requirements, and risk assessments as the company scales globally. You'll work cross-functionally to implement security policies, maintain compliance frameworks (SOC 2, ISO 27001), and support customer trust through transparent security documentation.
What you'll do
- Design and maintain tooling for continuous monitoring of security controls across AWS, Github, and other platforms
- Develop and oversee security compliance roadmap with focus on automation across corporate, IT, and product environments
- Conduct vendor security assessments and manage the security exception approval process
- Perform annual security risk assessments, develop risk treatment plans, and implement corrective actions
- Collaborate with internal and external auditors on compliance validation and maintain customer FAQ documentation
- Lead Business Impact Assessments and annual BCP/DR activities while creating procedural and training materials
What they're looking for
- GRC/compliance program management (SOC 2, ISO 27001)
- AWS or cloud service provider expertise
- Security control implementation and testing
- Audit and risk assessment
- Cross-functional stakeholder management
- Python or JSON scripting (preferred)
- Audit evidence automation (preferred)
- Policy development and technical documentation
Benefits
- Healthcare with 100% employee premium coverage under at least one plan
- Vision and dental coverage
- Family premium coverage at 80% under all plans
- Comprehensive wellness programs and resources
- Onsite work environment in San Mateo, CA
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Verkada
Verkada builds cloud-managed, AI-driven security solutions for enterprise customers, including physical security and building management products. The company is hiring Technical Support Engineers to troubleshoot issues and assist customers, as well as Solutions Engineers to provide pre-sales support and design tailored solutions.
- Website
- verkada.com
Likely interview questions
- Describe your experience leading a GRC program from scratch or scaling an existing one—what frameworks did you implement and how did you measure success?
- Walk us through a complex security audit you managed. How did you identify gaps and drive remediation across engineering and product teams?