Security GRC Engineer

Cursor
San Francisco +1 more
On-site

Who this role is best for

Security professionals with GRC framework expertise and cross-functional collaboration experience will find this strategic and technical role in a small, flat organization in the San Francisco Bay Area.

Best fit for

  • Candidates with GRC framework experience and a knack for translating policy into technical implementation
    — “experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1”
  • Individuals who enjoy blending compliance work with product development and customer trust-building
    — “This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.”
  • People who thrive in small, talent-dense teams and value autonomy and impact
    — “our team is small and talent dense”

Things to consider

  • The role demands in-person presence in San Francisco or Palo Alto for the onsite interview and project work
    — “we'll schedule an onsite at our office, where you'll work on a small project”
  • Candidates must be prepared to engage in technical interviews and demonstrate hands-on ability
    — “we'll reach out to schedule 2–3 short technicals”

How to stand out

  • Highlight experience in automating compliance workflows and translating security policies into technical systems
    — “Automate evidence gathering and continuous control testing.”
  • Showcase ability to explain complex security programs to external stakeholders like auditors and customers
    — “Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.”
  • Emphasize cross-functional collaboration with Legal, GTM, and Trust & Safety teams in prior roles
    — “strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators”
  • Demonstrate how you've built self-serve tools or documentation to support compliance and governance
    — “Build self-serve documentation and tools to answer customer security and AI governance inquiries.”
  • Demonstrate proactive issue detection and resolution in security and governance contexts
    — “you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome”
Pace · Fast PacedCollaboration · HighAutonomy · MediumDecision Impact · Team

Derived from job-description analysis by Serendipath's career intelligence engine.

What success looks like

  • automated compliance workflows
  • built self-serve tools
  • conducted security compliance reviews
  • supported Legal in contract negotiations
Typical background
security compliancerisk managementlegal compliance

Skills & requirements

Required

GRC FrameworksSOC 2ISO 27001ISO 42001Aiuc-1Cross-functional Collaboration

Preferred

CodingCuriositySecurity Compliance

Stack & domain

GRC FrameworksSOC 2ISO 27001ISO 42001Aiuc-1CodingSQLCross-functional CollaborationSecurityAI Governance

About the role

Original posting from Cursor via Ashby

Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.

ABOUT THE ROLE

Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You'll lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role blends technical implementation with strategic program development, directly shaping how we build trust with customers.

You may be a fit if

  • You have experience with GRC frameworks such as SOC 2, ISO 27001, ISO 42001, and AIUC-1.
  • You're comfortable tracing an external claim back to how the product and infrastructure are actually configured — you use coding agents and curiosity to confirm that what we say is what we do, flag issues that affect the security and AI governance program, and drive them to the right outcome.
  • You have strong cross-functional collaboration skills, especially with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.

Sample projects include

  • Automate evidence gathering and continuous control testing.
  • Own the relationship with audit firms and customers — you're the person who explains the security and AI governance program and earns their trust in it.
  • Conduct security compliance reviews for new products, features, and vendors.
  • Support Legal in contract negotiations with timely, accurate guidance on security and AI governance terms.
  • Support incident response communications — draft and review customer-facing updates during security incidents.
  • Build self-serve documentation and tools to answer customer security and AI governance inquiries.
  • Maintain corporate security policies.

Applying

If there appears to be a fit, we'll reach out to schedule 2–3 short technicals. After that, we'll schedule an onsite at our office, where you'll work on a small project, discuss ideas, and meet the team.

Source: Cursor careers (Ashby)

Similar roles