GRC Solutions Engineer

Anecdotes is redefining enterprise GRC for the AI era. We don't just "manage" compliance; we engineer it. We are looking for a GRC Solutions Engineer who hates manual spreadsheets as much as we do. You will be the bridge between our cutting-edge data platform and the exhausted GRC teams at some of the world’s most advanced companies, including Fortune 500 companies and leading auditors. By embedding AI across every corner of the Governance, Risk, and Compliance journey - audits, risk management, continuous control monitoring, and beyond - we’re turning a traditionally manual and fragmented process into a powerful, automated, and strategic driver of business growth. Your job is to turn their compliance chaos into automated, scalable infrastructure.

Anecdotes is redefining enterprise GRC for the AI era. We are the only AI-native enterprise GRC platform, built on a foundation of complete, accurate, and structured data automatically collected from your systems—trusted by some of the largest enterprises in the world, including Fortune 500 companies and leading auditors. By embedding AI across every corner of the Governance, Risk, and Compliance journey—audits, risk management, continuous control monitoring, and beyond—we’re turning a traditionally manual and fragmented process into a powerful, automated, and strategic driver of business growth.

• Full-Cycle GRC Engineering: Lead the transition of legacy programs into the modern era by providing both strategic advisory and direct technical execution. You will translate traditional frameworks into automated roadmaps and stay hands-on through the entire implementation process to ensure the technical architecture meets the strategic goal.
• Evidence Modernization & Infrastructure Alignment: Analyze diverse customer technical environments (Cloud/SaaS/Hybrid) to transition their compliance programs from manual screenshots to automated data collection. You will identify the relevant backend data sources and APIs within their stack to establish data-first evidence and configure analysis rules for continuous, real-time monitoring.
• Expansion & Growth: Proactively identify gaps and inefficiencies in customer security and risk posture where Anecdotes modules or Professional Services can drive further business value.
• Auditor Liaison: Empower customers to defend their automated controls to third-party auditors by leveraging platform data and technical best practices. This includes assisting customers with comprehensive readiness assessments.
• AI Implementation: Champion the use of AI tools to optimize GRC workflows ensuring customers leverage the latest automation capabilities to drive audit readiness.
• Product Voice: Contribute to product planning by effectively synthesizing customer feedback and domain expertise to influence the future of the Anecdotes platform.

Qualifications:

• Customer Facing: Comfort working in an external customer-facing role in the Cloud Solutions space - Must
• Security Expertise: 3+ years as a security practitioner in the GRC space (SOC 2, ISO 27001, NIST 800-53, etc.). - Must
• AI Tooling: Comfortable implementing AI tools in the accomplishment of day-to-day GRC workflows. Extensive hands-on experience with at least one LLM in the work environment. - Must
• Cloud Fluency: Proven ability to work within Public Cloud Provide.. Must be familiar with modern cloud services and understand API-based data retrieval. - Must
• Interpersonal Skills: Excellent interpersonal skills, with a talent for building lasting relationships and conveying complex ideas in a clear, structured way. - Must
• SOX Compliance: Experience with SOX 404 compliance, specifically the automation of financial controls within SaaS and Cloud environments - advantage.
• Bachelor’s Degree in Computer Science or other related field - advantage.

You’ll Thrive Here If You Are :

• Startup fit: You think out of the box, quick learner, agile, and willing to go the extra mile to accomplish ambitious goals.
• The Mission-Oriented Consultant: You take ownership of customer success. You can walk into a fragmented GRC department and establish order through structured, technical guidance.
• The Cloud-Native Practitioner: You understand that modern security happens in the console, not in a folder. You prefer "Evidence-as-Code" over "Screenshots-as-Evidence."
• The Scalable Thinker: You look for the "long-term fix." You aren't interested in just passing the next audit; you want to build a system that makes every future audit effortless.
• The Agile Problem-Solver: You are comfortable in high-growth, fast-paced environments. You can pivot between different customer architectures and frameworks without losing momentum.
• The Automation Advocate: You have a natural disdain for manual repetitive tasks. You are constantly looking for ways to use APIs, developer tools, and AI to optimize GRC workflows.