Replit

2 months ago

GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

GRC Engineer at Replit will architect and operationalize the company’s Governance, Risk, and Compliance program, balancing rigorous security controls with rapid product development. You’ll drive the Compliance-as-Code vision, collaborate across Engineering, Legal, and Sales, manage external auditors, and guide risk management for SOC 2, ISO 27001, PCI, HIPAA, and AI regulations, enabling enterprise trust while scaling security practices.

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Act as a technical subject matter expert for the GRC team, driving quality, depth, and operational efficiency in security controls.
•Own the technical vision for Replit’s GRC program, moving the team from manual workflows toward “Compliance-as-Code” and automated evidence collection.
•Champion a culture of security and privacy across the company, educating teams on why controls exist rather than just enforcing them.
•Partner with Architects and Engineering Leads to bake in compliance requirements early in the design phase and translate complex implementations into clear narratives for frameworks.
•Work with Legal Counsel to interpret Privacy/GDPR/CCPA requirements and emerging AI regulations, and manage external auditors as the bridge between auditors and internal teams.

Pay and Benefits

Salary: USD 210,000 - 320,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVision401kEquityRemote WorkCommuter Benefits

Key Requirements

•8+ years of experience in GRC or Information Security, with a track record of implementing security and compliance programs.
•Technical Fluency with engineering language, cloud environments (GCP/AWS), and security architecture.
•Deep experience with regulatory frameworks such as SOC 2, ISO 27001, PCI, HIPAA, and privacy laws.
•Strong ability to explain risk and tradeoffs to engineers, legal teams, and commercial stakeholders.
•Automation mindset with experience in GRC automation tools (e.g., Vanta, Drata) and a bias toward reducing manual toil.

Experience:8+ yearsGRCInformation SecurityComplianceRisk ManagementAutomation

Skills:CommunicationCollaborationProblem-solving

Languages:English

Tech Stack:GCPAWSSOC 2ISO 27001PCIHIPAAVantaDrata

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Replit

2 months ago

GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 5 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Hybrid

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Act as a technical subject matter expert for the GRC team, driving quality, depth, and operational efficiency in security controls.
•Own the technical vision for Replit’s GRC program, moving the team from manual workflows toward “Compliance-as-Code” and automated evidence collection.
•Champion a culture of security and privacy across the company, educating teams on why controls exist rather than just enforcing them.
•Partner with Architects and Engineering Leads to bake in compliance requirements early in the design phase and translate complex implementations into clear narratives for frameworks.
•Work with Legal Counsel to interpret Privacy/GDPR/CCPA requirements and emerging AI regulations, and manage external auditors as the bridge between auditors and internal teams.

Pay and Benefits

Salary: USD 210,000 - 320,000 annually

Equity and Bonus:Equity

Perks:Health InsuranceDentalVision401kEquityRemote WorkCommuter Benefits

Key Requirements

•8+ years of experience in GRC or Information Security, with a track record of implementing security and compliance programs.
•Technical Fluency with engineering language, cloud environments (GCP/AWS), and security architecture.
•Deep experience with regulatory frameworks such as SOC 2, ISO 27001, PCI, HIPAA, and privacy laws.
•Strong ability to explain risk and tradeoffs to engineers, legal teams, and commercial stakeholders.
•Automation mindset with experience in GRC automation tools (e.g., Vanta, Drata) and a bias toward reducing manual toil.

Experience:8+ yearsGRCInformation SecurityComplianceRisk ManagementAutomation

Skills:CommunicationCollaborationProblem-solving

Languages:English

Tech Stack:GCPAWSSOC 2ISO 27001PCIHIPAAVantaDrata

Company Brief

Replit

Provides a browser-based integrated development environment (IDE) and collaborative coding platform that lets developers write, run, and deploy code instantly across many languages and frameworks.

Industry: Developer Tools

Company Size: Large (251 to 1,000 employees)

Growth: Scaleup

Headquarters: San Francisco, United States

Founded: 2016

Website LinkedIn