Startups · AI

GRC Engineer

Reflection AI · New York, NY · On-site

← All jobs
About Reflection AI

Make intelligence open and accessible to all. Backed by Battery, Lightspeed and Sequoia.

About the role

Design and build automated controls and monitoring that satisfy security framework requirements (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC): access reviews, data minimization, model/data lineage, continuous evidence collection Partner with Engineering, Security, and IT to implement technical requirements arising from security frameworks, deemed export controls, and privacy regulations Found on 1752vc Careers, the job board for startup and VC roles.

What they're looking for

  • 3-6 years of software engineering, security engineering, or DevOps/infrastructure experience
  • Hands-on experience supporting at least one security framework (SOC 2, ISO 27001, or NIST) as an engineer, not just as a subject
  • Comfortable writing production-quality code (Python, or similar) and working with APIs/integrations
  • Experience translating non-technical requirements (policy, regulatory, contractual) into technical implementation
  • Familiarity with cloud infrastructure and identity/access management concepts
  • Strong collaboration skills, able to work effectively with compliance, legal, and engineering stakeholders who don't share a common vocabulary
More about this role

Reflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.

Reflection AI's Compliance and AI Governance function spans six pillars: AI Governance, Data Governance, Trade Compliance, Privacy Operationalization, Government Contracting Compliance, and Corporate Compliance. The team builds the policies, controls, and operating rhythms that let the company move fast while staying defensible with regulators, customers, and partners. This role sits at the intersection of compliance and engineering, partnering most closely on technical controls required by Security frameworks, AI Governance frameworks, Privacy, and Data Governance pillars to translate policy requirements into technical controls that scale.

We're looking for a Governance, Risk, & Compliance engineer who wants to work on compliance as a product problem rather than a paperwork problem. You'll build and maintain the technical infrastructure (tooling, pipelines, automated controls, evidence collection) that lets the...

Read the full posting on Reflection AI's site ↗

Legal

Build your edge while you search

Free tools for founders and investors, plus VC Unfiltered, our take on startups, venture and the people who build them.