GRC Engineer

As Flock scales its public safety platforms across cloud infrastructure and business operations, transforming compliance from a periodic audit exercise into a continuous, automated capability is essential. Maintaining customer trust and regulatory alignment across SOC 2, ISO, and privacy frameworks requires an engineering-driven approach to assurance. You will build scalable compliance processes, automate audit evidence collection, and embed continuous compliance frameworks directly into engineering and business workflows.

What You’ll Own

• Lead audit readiness and evidence management for SOC 2, ISO 27001, ISO 27701, and privacy frameworks using an automation-first approach.
• Architect and deploy automated workflows to transform point-in-time audits into continuous compliance monitoring capabilities across cloud and SaaS systems.
• Manage customer assurance requests, security questionnaires, and due diligence activities to maintain customer trust and accelerate business operations.
• Partner with Engineering, Security, Legal, Privacy, and Product teams to integrate compliance controls directly into software development and operational processes.
• Maintain and update security policies, controls, and compliance documentation to align with evolving regulatory requirements.

What This Role is Not

• This isn’t a traditional manual audit or checklist management role, you will focus on engineering-driven automation, workflow platform tools, and process optimization.
• This is not an isolated policy-writing function, you will collaborate daily with technical and non-technical stakeholders to embed compliance directly into operational workflows.
• This isn’t a passive advisory position, you will own audit readiness deliverables, manage customer security reviews, and build hands-on compliance tools.

• Demonstrated experience in GRC, cybersecurity, or IT audit within SaaS or cloud environments, preferably AWS.
• Hands-on experience supporting multi-framework audits such as SOC 2 or ISO 27001, alongside managing customer security due diligence activities.
• Capability to interpret regulatory requirements and translate compliance controls into actionable engineering and operational workflows.
• Practical understanding of cloud security concepts, automation platforms, and workflow tools used to scale compliance operations.
• Relevant industry certifications such as Security+, CISA, CRISC, or ISO 27001 Internal Auditor are a plus.

In this role, you’ll receive a starting salary between $130,000 and $145,000 as well as Flock Stock Options. Base salary is determined by job-related experience, education/training, as well as market indicators. Your recruiter will discuss this in depth with you during our first chat.

Every community deserves to be safe. Flock builds the technology that makes that real: last year we supported over 1 million criminal investigations and helped locate more than 10,000 missing people. We’re 1,700 people building the impossible with over $1B in funding, and the expectations are high on purpose. If you want a role where the stakes are real and the pace matches, this is it.

Some problems get solved faster in the same room, so we prioritize candidates in Atlanta and Boston. Hub-based roles mean real in-person time with your coworkers. Remote roles exist, and when a posting is open to remote work, it says so.

Building the impossible takes every kind of mind. Flock is an equal opportunity employer, and we know the best solutions come from diverse perspectives, experiences, and skills working together with mutual respect. Everyone is welcome to apply. If you need assistance or an accommodation due to a disability, email ; your information stays confidential and is used only to arrange the right accommodation for your interviews.

On compensation: we pay fairly for the work. Base salary is determined by job-related experience, education, training, and market indicators. The range in this posting covers base salary only and doesn’t include equity, sales bonus plans where applicable, or benefits. The range may be adjusted over time, and this posting may span more than one career level.