Sr. GRC Engineer
Raleigh, NC$133.4k - $160kfull-timePosted 3w ago
About the role
AI-first technical leader responsible for governance, risk, and compliance program evolution at Pendo. Leads complex compliance, risk, and incident-response work, translates security risk to business terms, and contributes to security roadmap and investment decisions while building durable controls.
Responsibilities
- AI-driven compliance and operations acceleration: use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research; evaluate GRC automation and integrate AI tooling; document and share approaches.
- Security program strategy and roadmap: identify maturity gaps across compliance and security operations; translate into prioritized roadmap recommendations; contribute to security investments; anticipate regulatory requirements.
- Compliance program ownership: own one or more regulatory compliance programs end-to-end (SOC 2 Type II, ISO 27001/42001, PCI-DSS, GovRAMP, or FedRAMP); lead control design, evidence collection, auditor relationships, remediation tracking.
- Risk assessment and prioritization: conduct organizational risk assessments; present findings with prioritization and investment recommendations; translate technical exposure into business-risk language.
- Incident response leadership: lead incident response for complex multi-system security events; root cause analysis; post-incident reviews; drive measurable program improvements.
- Cross-functional partnership: work with engineering, product, and IT teams to deliver compliance requirements; validate implementations; translate obligations into actionable technical requirements.
Qualifications
- 3 to 5 years of hands-on security experience with demonstrated ownership of compliance programs or security operations
- Deep knowledge of at least two frameworks among SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, or NIST 800-series
- Ability to independently own auditor relationships and manage an audit cycle end-to-end
- Experience leading incident response investigations from triage to root cause analysis and post-incident documentation
- Ability to translate security risk into business-risk language for leadership decisions
- Active use of AI tools to accelerate security workflows (evidence collection, policy drafting, regulatory research, or detection analysis)
- Strong written and verbal communication skills tailored to engineering, auditor, and leadership audiences
Skills
Required:GRC program ownershipAuditor relationship managementIncident response leadershipBusiness risk translationAI-enabled security workflows
Benefits
- Highly competitive, employer-heavy coverage including $0 premium options
- Strong 401(k) match
- Equity
- Flexible time off
Last updated Sep 30, 2026. Interested? Apply on the company site.
About Pendo
Product Experience & Analytics Platform | Pendo
AI-powered platform that improves how everyone uses software. Product analytics, in-app guides, churn prediction, and agent performance—unified by Pendo AI.
product analyticscustomer successuser onboardingin-app guidessession replayNPSfeedbackdigital adoption
More open roles at Pendo
- Account Director Enterprise Sales4d agoMunich, Germany · Enterprise
- Sr. Account Executive Enterprise Sales4d agoMunich · Enterprise
- Security Enablement Engineer4d agoHybrid (Raleigh, NC) · Information Security
- Software Engineer, Mobile SDK4d agoHerzliya, Israel · Engineering
- Sr. Customer Engineer1w agoHybrid (London, UK) · Customer Engineering