Security Engineer - GRC Sales

Details

This role is a mid-to-senior Governance, Risk, and Compliance (GRC) position focused on third-party risk management and customer trust. It sits at the intersection of cybersecurity GRC, vendor management, and sales enablement. The role acts as a security-minded presales engineer, completing customer vendor security questionnaires, participating in customer meetings as a security and compliance subject matter expert, and supporting third-party risk and vendor management processes.

The ideal candidate understands how AI and LLM systems, CI/CD pipelines, identity and access management, DevOps, DevSecOps, Kubernetes, and IT and AI governance operate in production, and can translate that knowledge into accurate responses for enterprise customers.

Responsibilities

• Support the sales organization as a cybersecurity and GRC presales partner by attending customer and prospect meetings, presenting the security and compliance posture, and answering technical and control-related questions.
• Own and improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests.
• Maintain a reusable knowledge base of control narratives based on how the organization operates.
• Build working fluency across AI and LLM systems, model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and IT and AI governance.
• Partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current.
• Translate customer security requirements into actionable internal requests and distinguish contractual or control commitments from unreasonable or out-of-scope demands.
• Contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.
• Coordinate with GRC and security teams on frameworks and evidence, including SOC 2, ISO 27001, ISO 42001, and privacy commitments, using GRC tooling such as Vanta.
• Identify patterns in customer questionnaires and deal blockers and feed insights into product, engineering, and GRC roadmaps.
• Present status updates on questionnaire volume, deal-impacting security requirements, vendor risk posture, and customer assurance themes.
• Communicate clearly and honestly with customers about security practices, AI and infrastructure governance, and risk scope.

Requirements

• Bachelor's degree in computer science, information security, cybersecurity, or an engineering or STEM field.
• At least 5 years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related customer-facing or sales-adjacent role.
• Experience completing or owning customer vendor security questionnaires and participating in enterprise security due-diligence discussions.
• Technical fluency in several of the following areas: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments such as AWS, Google Cloud Platform, or Microsoft Azure.
• Understanding of security and compliance frameworks including SOC 2, ISO 27001, and NIST CSF.
• Strong written and verbal communication skills for explaining cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences.

Preferred Skills and Experience

• 7 or more years of cybersecurity, GRC, third-party risk, customer trust, or security assurance experience.
• Experience in presales security, security solutions engineering, customer trust, or sales-enablement GRC at a technology, cloud, or AI company.
• Experience with vendor risk management programs, including onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting.
• Familiarity with AI governance topics, including model data handling, prompt and output controls, training-data boundaries, ISO 42001, NIST AI RMF, and the EU AI Act.
• Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base.
• Familiarity with GRC platforms such as Vanta or Drata.
• Ability to read architecture diagrams, IAM models, and pipeline or Kubernetes designs and convert them into customer-facing narratives.
• Working knowledge of data privacy frameworks such as GDPR and CCPA.
• Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, or CIPP/US.
• Experience supporting public-sector, financial-services, or other highly regulated customer diligence processes.

Benefits

The compensation range is $100,000–$228,000 USD in base salary. Total rewards also include equity, medical, vision, and dental coverage, a 401(k) retirement plan, short- and long-term disability insurance, life insurance, discounts, and other perks.

ITAR Requirements

Applicants must be a U.S. citizen or national, U.S. lawful permanent resident, refugee, or asylee, or be eligible to obtain the required authorizations from the U.S. Department of State in accordance with U.S. Government export regulations.