Senior GRC Engineer
Tandem Health· Product & Engineering
StockholmFull-timePosted 1mo ago
About the role
Lead the engineering behind Tandem Health's governance, risk and compliance (GRC) systems, turning security requirements into production controls, evidence pipelines and tests across security, software engineering and compliance.
Responsibilities
- Build production systems that collect, validate and preserve technical control evidence.
- Automate shared security controls when a central implementation is the right solution.
- Write tests that show whether controls operate as designed and continue to work over time.
- Connect requirements, controls, implementations, tests, evidence, policies and procedures.
- Detect missing, stale or incomplete evidence. Route failures to a named owner and keep a traceable record.
- Build workflows that identify drift between approved policies and technical implementations.
- Prepare reproducible evidence packages for the Compliance team.
- Join audits as a technical subject matter expert.
- Answer internal questions for go-to-market teams about our compliance and security posture.
- Help the Compliance and Legal teams assess how new requirements affect our security controls and systems.
- Build, deploy and operate approved GRC automation in our production environment.
- Keep the systems maintainable through version control, tests, monitoring and clear operating documentation.
Qualifications
- You are a senior engineer who is comfortable owning a defined problem from design through production.
- Can work independently, explain decisions and ask for help when blockers occur.
- Build and operate production software, automation or data pipelines.
- Work with APIs, cloud services and structured data from several systems.
- Translate security or compliance requirements into technical controls and testable conditions.
- Design evidence records with clear provenance, scope, collection time and retention requirements.
- Build monitoring that detects failed collection, stale evidence and control failure.
- Apply software engineering practices to compliance work, including testing, version control and code review.
- Explain technical controls and evidence to engineers, compliance colleagues and auditors.
- Make sound engineering decisions when the implementation path is not prescribed.
- Balance automation with access control, data minimisation and operational safety.
- Demonstrated capability prioritized over formal degrees or certifications.
Skills
Required:Production software and data pipelinesAPIs and cloud servicesTranslate security/compliance requirements into technical controlsGRC evidence design and provenanceMonitoring and alerting for evidence collection
Benefits
- Competitive salary and company stock options.
- 30 days of paid holiday each year.
- 5,000 SEK wellness allowance, plus 6,000 SEK annually for health-related initiatives.
- Parental leave top-up for new parents.
- Private medical insurance.
- Mental health support through Mindler.
- Pension programme.
- Regular social and team activities, including off-sites and seasonal events.
Last updated Sep 9, 2026. Interested? Apply on the company site.
About Tandem Health
Your AI assistant for every step of care
Tandem captures consultations and prepares structured clinical notes, documents, and codes for review. Designed for safe, compliant use across clinical care.
Clinical Decision SupportCompanyCustomer storiesEuropeHealth techProductRegulated clinical AIResources
More open roles at Tandem Health
- Medical Operations - Spain5d agoRemote · Medical Operations
- Talent Partner (Tech focused) - Stockholm5d agoStockholm, Berlin · Operations
- Project Delivery Lead (m/f/d)5d agoMunich · Medical Operations
- Project Delivery Lead, Spain5d agoRemote · Medical Operations
- Technical Project Manager5d agoStockholm · Product & Engineering