# GRC Engineer at Clerk

- Company: Clerk
- What the company does: The easiest way to add authentication and user management to your application. Purpose-built for React, Next.js, Remix, and “The Modern Web”. Backed by a16z.
- Company website: https://clerk.co
- Type: Startups
- Level: Mid level
- Location: Remote
- Work setup: Remote
- Posted: 2026-09-25
- Apply by: 2026-11-09
- Apply: https://jobs.ashbyhq.com/clerk/36597279-a42d-401c-88aa-153cc1a64f35
- Page: https://www.1752.vc/careers/jobs/clerk-grc-engineer/

## About the role

Own SOC 2 Type II and HIPAA end to end: scoping, control design, evidence, auditor walkthroughs, and remediation Scope and lead our next framework (ISO 27001 is the likely candidate) based on what customers actually ask for

## What they're looking for

- 5+ years in security, with demonstrated experience building automation for a GRC or compliance program
- You've been the technical owner of at least one SOC 2 Type II or ISO 27001 audit and can tell us what you would do differently
- You write code, and you use LLMs to get more done without lowering the bar
- Hands-on with a GRC platform's API, not just its dashboard
- Cloud IAM and configuration depth on at least one provider, GCP preferred
- You can decide what evidence is sufficient and defend an automated test to an auditor

Tags: Security