Security GRC Engineer
EudiaVisit Eudia website
Eudia is an AI platform for enterprise legal, contracting, and compliance teams that turns institutional knowledge into governed AI agents.
Palo Alto, California, United States
Funding history
About Eudia
Eudia provides augmented-intelligence software for in-house legal teams, embedding AI into legal workflows such as contracting, compliance, litigation, M&A, and legal research.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will translate security requirements into effective technical and operational controls, automate evidence collection and testing, and support audit readiness. You will partner with engineering functions to manage risks, remediation, security reviews, customer assurance, AI governance, and operational controls.
Requirements
- 4+ years of experience in security, GRC, security engineering, cloud security, or compliance engineering
- Understanding of SaaS and cloud environments, including identity, cloud infrastructure, networking, logging, CI/CD, application security, and data flows
- Ability to read Terraform, Kubernetes manifests, CI/CD configuration, IAM policies, and infrastructure-as-code artifacts
- Experience with at least two of SOC 2, ISO 27001, HIPAA, NIST CSF, or NIST 800-53
- Ability to assess technical control implementations and work with Engineering on remediation
- Experience working directly with engineers
- Experience using APIs, scripting, SQL, or similar automation tools
- Clear writing
- Experience with Azure or AWS security, cloud-native infrastructure, Kubernetes, or container security
- Experience with Okta or Auth0
- Experience with SIEM, vulnerability management, SAST, SCA, endpoint, or cloud security tooling
- Experience with compliance-as-code or continuous control monitoring
- Familiarity with AI/ML systems, LLM applications, or ISO 42001
- Exposure to FedRAMP or NIST 800-53 environments
- Experience supporting security diligence for Fortune 500 customers
Responsibilities
- Translate framework requirements into technical and operational controls
- Validate control effectiveness
- Automate evidence collection and control testing
- Drive audit readiness and work with auditors and assessors
- Manage control mappings, risks, findings, exceptions, and remediation tracking
- Partner with Engineering, Infrastructure, IT, and Product to design controls
- Support security reviews, due diligence, and customer trust activities
- Prioritize vulnerability findings and drive remediation
- Support AI governance, model inventory, and data-handling requirements
- Maintain access reviews, change management, logging, monitoring, vendor risk, and incident response evidence
- Partner with the ISSM on NIST 800-53 and FedRAMP-related control work
- Turn repeatable compliance work into automation, infrastructure, or product capabilities
