Security GRC Engineer

Cursor
San Francisco, Palo Alto
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringSkills: ["Cross-functional collaboration","Curiosity","Truth-seeking","Passionate","Creative"]

Design, implement, and scale a governance, risk, and compliance program by automating compliance workflows and building self-serve tools for GTM teams. Trace external security and AI claims back to real product and infrastructure configurations, coordinate cross-functionally with Engineering, Legal, Trust & Safety, and auditors, and support audit readiness, vendor/product reviews, and security incident communications. Help maintain corporate security policies and support ongoing governance documentation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Cursor
Cursor
1 day ago

Security GRC Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 1 hour agoStatus: Live

Job Summary

Design, implement, and scale a governance, risk, and compliance program by automating compliance workflows and building self-serve tools for GTM teams. Trace external security and AI claims back to real product and infrastructure configurations, coordinate cross-functionally with Engineering, Legal, Trust & Safety, and auditors, and support audit readiness, vendor/product reviews, and security incident communications. Help maintain corporate security policies and support ongoing governance documentation.
Location: San Francisco, Palo Alto
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering

Key Responsibilities

  • •Automate evidence gathering and continuous control testing to support ongoing compliance.
  • •Own relationships with audit firms and customers by explaining the security and AI governance program and building trust.
  • •Conduct security compliance reviews for new products, features, and vendors.
  • •Support Legal with timely guidance on security and AI governance terms during contract negotiations.
  • •Support incident response communications by drafting and reviewing customer-facing updates during security incidents.

Key Requirements

  • •Experience with GRC frameworks including SOC 2, ISO 27001, ISO 42001, and AIUC-1.
  • •Ability to trace external claims back to how the product and infrastructure are configured, using coding agents and curiosity to confirm “what we say is what we do.”
  • •Identify and drive issues that affect the security and AI governance program to resolution.
  • •Strong cross-functional collaboration with Engineering, Legal, GTM, Trust & Safety, auditors, and regulators.
Experience:GRCAudit readinessSecurity complianceAI governance
Skills:Cross-functional collaborationCuriosityTruth-seekingPassionateCreative
Tech Stack:SOC 2ISO 27001ISO 42001AIUC-1

Company Brief

Cursor
Builds Cursor, an AI-powered development platform and code editor that helps developers write, review, and maintain code using large language models and developer-focused automation tools for enterprise engineering teams.
Industry: Developer Tools
Company Size: Large (251 to 1,000 employees)
Revenue: USD 1B+
Growth: Scaleup
Valuation: Unicorn (USD 1B+)
Funding: Series D
Headquarters: San Francisco, United States
Founded: 2022
Glassdoor
Glassdoor: 3.0
WebsiteLinkedInGlassdoor