GRC Engineer
- Where you can live
- Remote
- Working hours
- Overlap with UTC-10 to UTC-5
- Salary
- Not published
- Posted
- September 25, 2026
Summary from the posting
Own SOC 2 Type II and HIPAA end to end: scoping, control design, evidence, auditor walkthroughs, and remediation
Scope and lead our next framework (ISO 27001 is the likely candidate) based on what customers actually ask for
Build and maintain the integrations that feed our GRC platform from our cloud providers, SaaS tools, and internal systems
Turn controls into continuous checks: policy-as-code, config drift detection, and a control-failure pipeline from detection to closure
Run the vendor security review program, from intake to periodic re-review
Own the security questionnaire and trust center workflow
Maintain the risk register and run risk assessments that produce documented decisions
This is a short summary. The full description, requirements and the application form are on Clerk's own career page.