Senior GRC Engineer, Trust

About the role

You will partner with Product, R&D Engineering, Security Engineering and adjacent teams to implement and operationalize security and compliance controls across Chainalysis products. You will own end-to-end remediation of compliance and security findings, from gap identification through validation and closure. You will build scalable evidence collection and control-testing workflows that improve audit readiness and reduce manual effort. You will drive continuous control improvement across a segmented product suite, including pass-through security and compliance requirements where applicable. You will support product and risk review processes by helping teams translate requirements into practical technical and operational actions. You will advocate for a durable, scalable control environment that keeps pace with business growth and customer expectations. You will help shape GRC automation and stronger operating rhythms across the Trust organization.

Key facts

What you'll do

• Partner with Product, R&D Engineering, Security Engineering and adjacent teams to implement and operationalize security and compliance controls across Chainalysis products.
• Own end-to-end remediation of compliance and security findings, from gap identification through validation and closure.
• Build scalable evidence collection and control-testing workflows that improve audit readiness and reduce manual effort.
• Drive continuous control improvement across a segmented product suite, including pass-through security and compliance requirements where applicable.
• Support product and risk review processes by helping teams translate requirements into practical technical and operational actions.
• Advocate for a durable, scalable control environment that keeps pace with business growth and customer expectations.
• Help shape GRC automation and stronger operating rhythms across the Trust organization.
• Leverage AWS and Cloud Architecture expertise to ensure deployed controls are resilient, observable, and aligned with security objectives.
• Utilize Terraform and Infrastructure as Code practices to standardize control implementation and repeatability.
• Engage with Vanta and Trust Center workflows to streamline evidence gathering and demonstrate compliance effectiveness.

Requirements

• Experience implementing and operating security or compliance controls in a cloud, SaaS, or otherwise regulated technology environment.
• Built repeatable evidence collection, control testing, or remediation workflows that improved audit readiness and reduced manual work.
• Experience partnering cross-functionally with engineering, security, and business stakeholders to move control work from requirement to implementation.
• The ability to translate customer, audit, or internal control requirements into clear technical actions for delivery teams.
• Strong written and verbal communication skills, including the ability to explain risk, tradeoffs, and remediation plans to both technical and non-technical audiences.
• Experience supporting assurance or compliance programs such as SOC 2, ISO 27001, customer security reviews, or similar control frameworks.
• A track record of influencing cross-functional work, collaborating broadly, and providing guidance in a senior IC role.
• A practical, systems-minded approach to improving controls without creating unnecessary friction for the business.

Nice to have

• Experience with Trust Center operations or customer-facing security and compliance request workflows.
• Familiarity with identity and access management controls such as Okta and MFA enforcement.
• Experience with GRC automation or workflow tooling that improves evidence collection, remediation tracking, or control monitoring.
• Exposure to blockchain, fintech, or other high-trust environments where customer assurance and technical controls are tightly coupled.

Practical notes

• US Citizenship is required.
• Please note: This position is ineligible for visa sponsorship.

AI at Chainalysis

AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it.

AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, an