← All roles

Senior GRC Engineer

Aircall· Engineering – 13014 - Infrastructure
Apply on company site
Hybrid (New York City)$180k - $200kPermanent Full Time EmployeePosted 10mo ago

About the role

Aircall is hiring a Senior GRC Engineer to build and operate the engineering backbone of the Governance, Risk & Compliance program within the Security Engineering team, partnering across IT, Privacy, Legal, Product, and Engineering to make compliance continuously verifiable.

Responsibilities

  • Design, implement, and operate technical controls that satisfy SOC 2, ISO 27001, NIST, and GDPR requirements across our cloud (AWS), SaaS, and corporate environments.
  • Build and maintain integrations between our GRC platform (Drata) and source systems — IdP, cloud providers, ticketing, code repositories, HRIS, endpoint management — to automate evidence collection and continuous control monitoring.
  • Engineer "compliance-as-code" workflows: codify policies and controls, automate drift detection, and surface failing controls back to owning teams via Jira, Slack, or dashboards.
  • Support and progressively automate audit readiness: SOC 2 Type II, ISO 27001 (and any future certifications such as HIPAA, FedRAMP, PCI as the strategy evolves), preparing evidence, walking auditors through controls, and remediating findings.
  • Operate the enterprise risk register day-to-day: run risk assessments, track mitigations, and produce reporting that helps leadership make decisions.
  • Build and run the technical side of the vendor security program — questionnaire automation, tiering, evidence review, and ongoing monitoring of critical vendors.
  • Partner with IT, Product, and Engineering to embed security and compliance requirements into the SDLC, change management, access reviews, and infrastructure provisioning.
  • Contribute to incident response from the GRC side: maintain runbooks and policies, ensure regulatory and contractual notification timelines are met, and capture evidence and lessons learned.
  • Partner with Legal/Privacy on GDPR obligations, data residency, DPAs, and customer security commitments.
  • Help mature security awareness and training — measuring effectiveness, not just running it.
  • Author and maintain security policies and standards in clear, accurate language that engineers will actually read.
  • Promote a security-first culture across all functions, ensuring employees understand their role in protecting company and customer data.

Qualifications

  • 5+ years in security, with at least 2–3 years in a GRC engineering, security engineering, or compliance automation role at a SaaS or cloud-native company.
  • Strong working knowledge of SOC 2, ISO 27001, NIST CSF / 800-53, and GDPR, and what it takes to actually operate (not just pass) them.
  • Hands-on experience with a modern GRC platform (Ideally Drata) — including building or extending its integrations, not just clicking through the UI.
  • Comfortable using AI tools to accelerate delivery and scale impact.
  • Comfortable writing code (Python, Go, or similar) and working with cloud APIs (AWS), Terraform/IaC, and CI/CD pipelines.
  • Solid understanding of cloud security, identity and access management, and how engineering teams ship software.
  • Experience supporting external audits as a technical lead and remediating findings.
  • Working knowledge of risk management frameworks and vendor security assessment.
  • Strong written communication — you can turn a control requirement into a clear ticket, runbook, or policy that gets adopted.
  • Bonus: relevant certifications (CISA, CISSP, ISO 27001 LI/LA, AWS/GCP security), experience with privacy engineering, or prior work building a GRC function from early stage to audit-ready.

Skills

Required:SOC 2ISO 27001NIST CSF / 800-53GDPRGRC tooling (Drata)Compliance automationCoding (Python/Go)AWSTerraform/IaCCI/CD

Benefits

  • $180,000 - $200,000 a year
  • This is not including equity and other benefits. The actual salary offered will carefully consider a wide range of factors, including your skills, qualifications, and experience.
  • 🚀 Key moment to join Aircall in terms of growth and opportunities
  • 💆‍♀️ Our people matter, work-life balance is important at Aircall
  • 📚 Fast-learning environment, entrepreneurial and strong team spirit
  • 🌍 45+ Nationalities: cosmopolite & multi-cultural mindset
  • 💵 Competitive salary package & benefits
  • 🏨 Medical, dental, and vision insurance is 100% covered
  • 📈 401k plan with company matching!
  • ✈️ Unlimited PTO — take the time you need to come to work feeling great!
  • ⭐️ Well-being, commuter, and childcare reimbursements
  • 💚 Generous parental leave policy
  • DE&I Statement: ... (descriptive diversity statement included in original)
Last updated Jul 1, 2026. Interested? Apply on the company site.
Aircall logo

About Aircall

AI-powered customer conversations made easy

Aircall is more than a business phone—it’s an integrated customer communications and intelligence platform. Achieve more with AI Agents, data-driven insights, and automation.

Customer CommunicationsAIAutomationCRM IntegrationHelpdeskVoIPCloud-based
Company profileWebsite

More open roles at Aircall