.png)
Loading jobs…
Cybersecurity
Clerk
Clerk, the authentication and user-management platform for developers, is hiring a Senior GRC Engineer to join its Security Team. This is a hands-on engineering role rather than a paperwork role: you own SOC 2 Type II and HIPAA audits end to end, scope and lead the ISO 27001 program, integrate the GRC platform with cloud infrastructure, and turn controls into policy-as-code continuous checks. The posting is tagged Remote with workplace type Remote on Clerk's own Ashby job board, and the structured location on the posting reads "US or EU", so candidates based in either the United States or the European Union are in scope. Compensation is described as competitive salary plus equity via stock options and top-tier health coverage; a specific range is not displayed. Full-time employment. Freshness evidence: Clerk's Ashby posting API shows publishedAt 2026-09-25 15:11 UTC for this role, with the board's only other opening (Brand Designer) carrying a distinct Sep 23 timestamp. Note: the two-region eligibility rests on the posting's structured location field rather than a prose sentence, and the listing title says GRC Engineer while the body describes the role as Senior.
4 more roles like this one.
Own SOC 2 Type II and HIPAA compliance end to end: scoping, control design, evidence collection, auditor walkthroughs and remediation. Lead the scoping and implementation of ISO 27001. Build integrations between the GRC platform and cloud infrastructure so evidence is collected automatically. Translate controls into policy-as-code and continuous automated checks. Run vendor security reviews and maintain the risk register. Embed security and compliance requirements into the development workflow so engineers can ship without friction. Produce clear technical documentation and policies.
5 or more years in security, including significant GRC automation work. Prior ownership of a SOC 2 Type II or ISO 27001 audit. Ability to write code, including using LLMs to accelerate compliance work. Experience with GRC platform APIs and integrations. Solid understanding of cloud IAM, with Google Cloud Platform preferred. Strong technical writing skills. Experience at an all-remote company is a plus. Based in the United States or the European Union.
Marked skills have a short guide — click one to see what to learn.
USD 115K - 150K/yr
See roles like this one
A free account opens every listing on EnRoute Jobs, saves the ones worth keeping, and scores each against your skills.
Create a free accountAlready have one? Log in
This job title typically pays $129,180 to $199,850 a year (median $163,500) for similar roles in the US.
Estimate from US Bureau of Labor Statistics data, not provided by the employer.