GRC Engineer

Builds and leads the governance, risk, compliance and assurance (GRCA) function inside Verkada's Security Team, managing risk and keeping compliance in step with the company's growth among enterprise and international customers. The role also curates what customers are told about Verkada's security practices.

The work is hands-on and automation-heavy. The engineer builds and maintains tooling to test and continuously monitor security controls across platforms such as AWS and GitHub, owns the roadmap for continuous compliance across corporate, IT and product environments, and advises Security, IT, Engineering, Product and Legal on how controls should be designed and automated. Annual risk assessments and treatment plans, vendor security reviews, the security exception process, corrective action plans and company security policies all sit here, along with the customer questionnaire FAQ, business impact assessments, BCP and disaster recovery exercises, and work with internal and external auditors. Using AI to scale the function is expected.

Verkada wants seven or more years in security or IT compliance, audit experience with SOC 2 and ISO 27001 for cloud software, familiarity with AWS or a similar provider, and the ability to get results across teams when things are ambiguous. Python scripting and automated evidence collection are pluses. The role is on-site in San Mateo five days a week.