Senior GRC Engineer

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications. Since our public launch, we've crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. We're backed by Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator. We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from Google, Amazon, and Dropbox. We're hiring builders who want ownership, speed, and impact at global scale. Senior GRC Engineer The Role Emergent is scaling a global B2C product used across 190+ countries. We’re looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection. What You’ll Own - Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal. - Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing. - AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution. - GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness. - Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement. What We’re Looking For - 5 to 7+ years in GRC, security compliance, privacy, or risk - Hands-on experience with SOC 2 / ISO 27001 - Strong understanding of GDPR and global privacy - Experience managing audits, vendors, controls, and compliance programs end to end - Ability to work closely with Engineering, Security, Product, and Legal teams What Sets You Apart - You think in systems, not checklists - Experience with AI governance, EU AI Act, or cloud-native products - Comfortable building GRC programs from the ground up - Prefer practical, scalable controls over paperwork Why Emergent - Build governance for AI systems that build software - Operate at global scale across 190+ countries - Work directly with founders and core engineering, security, and product teams - Solve emerging challenges at the intersection of AI, security, privacy, and regulation