> Markdown version of [/jobs/ext/2210840-grc-engineer](https://www.wearedevelopers.com/jobs/ext/2210840-grc-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # GRC Engineer - **Company:** Verkada Inc. - **Location:** San Mateo, CA, United States - **Experience:** Expert - **Salary:** $200,000.0 - $250,000.0 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Cloud Computing, Github, JSON, Python (Programming Language), Cloud Services, Scripting - **Published:** August 24, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18057825?backUrl=%2Fcareer%2F18057825%2FGrc-Engineer-California-San-Mateo ## About the Role * Outstanding written and spoken communication skills * Ability to effectively and autonomously accomplish outcomes across cross-functional teams in ambiguous situations * Ability to multitask, prioritize work and meet deadlines in a fast paced environment * Experience with AWS or another cloud service provider * Prior experience with software companies' compliance * Experience with audits, risk and compliance (SOC 2, ISO27001, etc.) for cloud software products. * 7+ years of security/IT compliance or equivalent experience * Bonus: Experience with scripting languages such as: Python, JSON etc * Bonus: Prior experience automating audit evidence collection ## Description Build and lead the GRCA function within Verkada's Security Team. Manage risks, scale and meet Verkada's growing compliance needs. Curate information provided to customers about Verkada's security practices. You'll build scalable, automated programs that enable rapid business growth while maintaining customer trust. As Verkada expands globally with increasing enterprise customers, this role is critical to meeting sophisticated security and compliance expectations that directly impact revenue and risk management. What You'll Do * Work cross functionally with Security, IT, Engineering, Product and Legal to provide guidance on security controls implementation including: effectiveness, implementation and automation + Research, build and maintain tooling for testing and continuous monitoring of security controls across multiple platforms including: AWS, Github, etc. * Maintain the roadmap for continuous security compliance across Verkada's Corporate, IT and Product environments with a goal of increasing automation coverage * Assist in the development and maintenance of company-wide security policies, procedures, and plans, and support communication to internal stakeholders regarding security and compliance best practices around applicable laws, regulations, and controls * Communicate progress, escalations, and issue resolution to management and team stakeholders * Create procedural documentation, including training materials or process documentation * Build relationships with a broad range of Verkada employees at all levels to accomplish program objectives and further Verkada GRC goals. * Implement the development and oversight of required corrective action plans relating to security compliance issues * Perform annual security risk assessments and prepare risk treatment plans * Conduct vendor security assessments to assess risks and evaluate security postures of new and existing third-party vendors/suppliers * Manage the Security Exception Process to enable Security teams to track exceptions, manage approvals, and improve automation * Assurance program (the A in GRCA) - Maintain the FAQ for customer questionnaires * Collaborate on Business Impact Assessments (BIA) and annual BCP/DR activities * Leverage AI and automation to scale the GRCA functions * Work closely with internal and external auditors to educate them and achieve continuous compliance over technology control environment * Must be willing and able to work onsite five days per week ## Related Videos - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Introducing JSON Structure](https://www.wearedevelopers.com/videos/100219-introducing-json-structure) - [Your Enterprise RAG Has No Legal Basis](https://www.wearedevelopers.com/videos/100344-your-enterprise-rag-has-no-legal-basis) ## Related Articles - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)