Senior Software Engineer - GRC

Emergent is scaling a global B2C product used across 190+ countries. We’re looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.

Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.

Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.

AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.

GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.

Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.

5 to 7+ years in GRC, security compliance, privacy, or risk

Hands-on experience with SOC 2 / ISO 27001

Strong understanding of GDPR and global privacy

Experience managing audits, vendors, controls, and compliance programs end to end

Ability to work closely with Engineering, Security, Product, and Legal teams

You think in systems, not checklists

Experience with AI governance, EU AI Act, or cloud-native products

Comfortable building GRC programs from the ground up

Prefer practical, scalable controls over paperwork

Build governance for AI systems that build software

Operate at global scale across 190+ countries

Work directly with founders and core engineering, security, and product teams

Solve emerging challenges at the intersection of AI, security, privacy, and regulation