Senior GRC Engineer

Governance, Risk & Compliance (GRC) Lead

The Role

Emergent is scaling a global B2C product used across 190+ countries. We're looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

What You'll Own

• Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
• Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
• AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
• GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
• Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

What We're Looking For

• 5 to 7+ years in GRC, security compliance, privacy, or risk
• Hands-on experience with SOC 2 / ISO 27001
• Strong understanding of GDPR and global privacy
• Experience managing audits, vendors, controls, and compliance programs end to end
• Ability to work closely with Engineering, Security, Product, and Legal teams

What Sets You Apart

• You think in systems, not checklists
• Experience with AI governance, EU AI Act, or cloud-native products
• Comfortable building GRC programs from the ground up
• Prefer practical, scalable controls over paperwork

Why Emergent

• Build governance for AI systems that build software
• Operate at global scale across 190+ countries
• Work directly with founders and core engineering, security, and product teams
• Solve emerging challenges at the intersection of AI, security, privacy, and regulation