GRC Engineer

Clerk·RemoteRemotosenior

En corto

→Ingeniero GRC sénior que construye automatizaciones para cumplimiento de seguridad (SOC 2, HIPAA, ISO 27001).
→Diariamente: integra sistemas, escribe políticas como código, verifica desviaciones y mantiene la evidencia lista para auditorías.
→Lo destacado: el objetivo es que una auditoría sea solo una observación, no un esfuerzo caótico.

You write code, and you use LLMs to get more done without lowering the bar

En ~1 minuto te damos: quién te entrevista, las preguntas probables con respuestas desde tu CV, y tu CV adaptado a esta vacante. Gratis, sin tarjeta.

🎧¿Llegás a la entrevista? Llevá el copiloto. Nuestra extensión escucha la entrevista en vivo y te muestra anclas de 3-4 palabras desde tu CV y tu preparación — mirás, conectás, hablás. Gratis. Ver la extensión →

¿Qué piden?

✓5+ años en seguridad con experiencia en automatización para GRC.
✓Experiencia técnica como propietario de auditorías SOC 2 Type II o ISO 27001.
✓Capacidad de escribir código y usar LLMs para aumentar eficiencia sin sacrificar calidad.
✓Conocimiento profundo de IAM y configuración en cloud (GCP preferido).
✓Capacidad para definir evidencia suficiente y defender pruebas automatizadas ante auditores.
✓Habilidades de escritura clara para documentar políticas, narrativas y respuestas a cuestionarios.

¿No cumplís todo? Es lo normal — tu dossier gratis te dice qué gaps tenés y cómo cubrirlos en la entrevista.

GRC platformCloud IAMGCPSOC 2 Type IIHIPAAISO 27001Policy-as-codeConfig drift detectionControl-failure pipelineLLMs

¿A quién escribirle en Clerk?

Tu dossier gratis identifica a las personas que te entrevistarían — con su background, qué valoran y cómo escribirles para destacar antes de aplicar.

ABOUT CLERK Clerk is on a mission to solve the user identity layer once and for all. We are a globally distributed team dedicated to providing best-in-class developer infrastructure to build the next generation of AI software. Today, we provide developers with full-stack React components and hooks like https://clerk.dev/components/sign-up, https://clerk.dev/components/sign-in, https://clerk.dev/components/user-profile, useUser https://clerk.com/docs/references/react/use-user, and useOrganization https://clerk.com/docs/references/react/use-organization. These APIs allow developers to build hard-to-get-right infrastructure for user identity, organization management and billing flows. We believe that a component is worth a thousand APIs https://youtube.com/watch?v=enUuBY3HXh4. Clerk is looking for a Senior GRC Engineer to join our Security Team. Our customers put Clerk in the middle of their authentication flow, and every one of them runs us through their own vendor review before they do. You'll own the program that makes that review easy: the controls, the evidence, the audits, and the answers. You'll work as a hands-on engineer. Expect to spend a lot of your time writing integrations, automations, and internal tools that enforce policies and automate the evidence gathering. The goal is a program that's always current, so an audit is just someone observing it rather than a quarterly scramble. WHAT YOU'LL DO - Own SOC 2 Type II and HIPAA end to end: scoping, control design, evidence, auditor walkthroughs, and remediation - Scope and lead our next framework (ISO 27001 is the likely candidate) based on what customers actually ask for - Build and maintain the integrations that feed our GRC platform from our cloud providers, SaaS tools, and internal systems - Turn controls into continuous checks: policy-as-code, config drift detection, and a control-failure pipeline from detection to closure - Run the vendor security review program, from intake to periodic re-review - Own the security questionnaire and trust center workflow - Maintain the risk register and run risk assessments that produce documented decisions - Embed compliance requirements into the SDLC and change management so they're enforced by tooling, not by reminders - Reduce the number of things a human has to do to pass an audit every quarter WHO YOU ARE - 5+ years in security, with demonstrated experience building automation for a GRC or compliance program - You've been the technical owner of at least one SOC 2 Type II or ISO 27001 audit and can tell us what you would do differently - You write code, and you use LLMs to get more done without lowering the bar - Hands-on with a GRC platform's API, not just its dashboard - Cloud IAM and configuration depth on at least one provider, GCP preferred - You can decide what evidence is sufficient and defend an automated test to an auditor - Comfortable being one of a few security engineers; you can scope, prioritize, and ship without a lot of process around you - Clear writer: policies, control narratives, and questionnaire answers are read by customers, so they have to be good NICE-TO-HAVES - Experience at an all-remote company - Shipped LLM or agentic workflows in production for compliance work - Experience at a developer-tools company BENEFITS - Competitive Salary – We want you to know that we value the skills and experience you bring to the table. We go out of our way to make sure that you feel fairly compensated. - Equity Ownership – At Clerk, we believe in shared success. That's why we offer a stock option plan so that everyone can benefit from the growth and prosperity of the company. - Health Coverage – We care about your well-being. That's why we offer top-tier health insurance to ensure that your health needs are fully met. - Work Gear - Set up your ideal home office with the gear of your choice. At Clerk, we want to ensure that

¿Buscando algo parecido?

Dejá tu email y te avisamos cuando salgan vacantes que coincidan con tu perfil.

No apliques sin prepararte

Investigamos quién te entrevista, adaptamos tu CV y te ensayamos en vivo — gratis la primera.