GRC Engineer

About the role

This role involves establishing and leading the Governance, Risk, and Compliance (GRC) function within Verkada's Security Team. You will manage risks, scale compliance efforts, and provide information to customers about Verkada's security practices. The position is crucial for meeting sophisticated security and compliance expectations as the company expands globally, directly impacting revenue and risk management.

Key facts

What you'll do

• Guide the implementation of security controls across Security, IT, Engineering, Product, and Legal teams, focusing on effectiveness and automation.
• Research, build, and maintain tools for continuous monitoring and testing of security controls on platforms like AWS and Github.
• Maintain the roadmap for continuous security compliance across Verkada's Corporate, IT, and Product environments, aiming for increased automation.
• Help develop and maintain company-wide security policies, procedures, and plans, and communicate best practices internally.
• Report on progress, escalate issues, and resolve problems for management and team stakeholders.
• Create procedural documentation, including training materials.
• Build relationships across all levels of Verkada to achieve GRC objectives.
• Oversee the development and implementation of corrective action plans for security compliance issues.
• Perform annual security risk assessments and prepare risk treatment plans.
• Conduct vendor security assessments to evaluate risks and security postures of third-party vendors.
• Manage the Security Exception Process, tracking exceptions, approvals, and improving automation.
• Maintain the FAQ for customer security questionnaires.
• Collaborate on Business Impact Assessments (BIA) and annual Business Continuity Plan/Disaster Recovery (BCP/DR) activities.
• Utilize AI and automation to scale GRC functions.
• Work with internal and external auditors to ensure continuous compliance with technology controls.
• Work onsite five days per week.

Requirements

• Excellent written and verbal communication skills.
• Ability to achieve results independently across various teams in unclear situations.
• Capable of managing multiple tasks, prioritizing work, and meeting deadlines in a fast-paced environment.
• Experience with AWS or another cloud service provider.
• Previous experience with compliance in software companies.
• Experience with audits, risk, and compliance (SOC 2, ISO27001) for cloud software products.
• 7 or more years of experience in security/IT compliance or an equivalent field.

Nice to have

• Experience with scripting languages such as Python or JSON.
• Prior experience automating audit evidence collection.

Skills & tools

• AWS
• Github
• SOC 2
• ISO27001
• Python
• JSON

Practical notes

• Verkada sponsors and takes over employment visas for this role.
• Benefits include 100% employee healthcare premium coverage (80% for families), nationwide medical, vision, and dental.
• Health Savings Account (HSA) with employer contributions and Flexible Spending Account (FSA) options.
• Expanded mental health support, paid parental leave, and fertility benefits.
• Paid holidays, extended company holidays, flexible PTO, and personal sick time.
• Professional development stipend and wellness/fitness benefits.
• Daily healthy lunches and commuter benefits.

About the company

Verkada Inc. is an American security technology firm headquartered in San Mateo, California. Established in 2016, the organization develops modern solutions for physical safety and facility management. The company builds hardware devices designed to safeguard physical spaces. Its product line includes video cameras that capture visual footage across facilities. It also produces access control systems that regulate entry into buildings and secured areas. In addition, the firm manufactures environmental sensors that track physical conditions like air quality and temperature inside properties. Software powers these hardware products. Verkada connects its equipment directly to cloud platforms. The company applies machine vision and artificial intelligence to process the data gathered by its physical devices. This combination allows organizations to manage their hardware remotely through centralized digital systems. Physical security is an essential need for modern organizations. Businesses, schools, and public institutions rely on connected technology to protect people, assets, and facilities. By integrating hardware devices with cloud software, security management becomes more efficient and responsive. Advanced visual processing helps users identify relevant events without reviewing hours of static footage. Verkada continues to refine its hardware and software ecosystem. The team brings together specialists in hardware design, software engineering, artificial intelligence, and cloud operations. Employees work together to build tools that simplify facility security for organizations around the world. Joining the team means contributing to products that protect everyday physical environments.