NEWExplore the live 3D Global Career Radar with real-time hiring telemetry.Open
CM
The Career Machine
Back to Jobs
Ashby Verified ATS Remote

GRC Engineer

Clerk Remote 1mo ago
FullTime
Analyzing job security signals...
Employer Website Verification
Domain Est. 2021jobs.ashbyhq.com

About Clerk (Wikipedia Record):

A clerk is a white-collar worker in an administrative professional capacity who conducts record keeping as well as general office tasks, or a grey-collar worker who performs similar sales-related tasks in a retail environment. The responsibilities of clerical workers commonly include record keeping, filing, staffing service counters, screening callers, and other administrative tasks. In City of London livery companies, the clerk is the chief executive officer.

About the Role

ABOUT CLERK Clerk is on a mission to solve the user identity layer once and for all. We are a globally distributed team dedicated to providing best-in-class developer infrastructure to build the next generation of AI software. Today, we provide developers with full-stack React components and hooks like https://clerk.dev/components/sign-up, https://clerk.dev/components/sign-in, https://clerk.dev/components/user-profile, useUser https://clerk.com/docs/references/react/use-user, and useOrganization https://clerk.com/docs/references/react/use-organization. These APIs allow developers to build hard-to-get-right infrastructure for user identity, organization management and billing flows. We believe that a component is worth a thousand APIs https://youtube.com/watch?v=enUuBY3HXh4. Clerk is looking for a Senior GRC Engineer to join our Security Team. Our customers put Clerk in the middle of their authentication flow, and every one of them runs us through their own vendor review before they do. You'll own the program that makes that review easy: the controls, the evidence, the audits, and the answers. You'll work as a hands-on engineer. Expect to spend a lot of your time writing integrations, automations, and internal tools that enforce policies and automate the evidence gathering. The goal is a program that's always current, so an audit is just someone observing it rather than a quarterly scramble. WHAT YOU'LL DO - Own SOC 2 Type II and HIPAA end to end: scoping, control design, evidence, auditor walkthroughs, and remediation - Scope and lead our next framework (ISO 27001 is the likely candidate) based on what customers actually ask for - Build and maintain the integrations that feed our GRC platform from our cloud providers, SaaS tools, and internal systems - Turn controls into continuous checks: policy-as-code, config drift detection, and a control-failure pipeline from detection to closure - Run the vendor security revie

Similar Roles

View all
AmplitudeSan Francisco, CA
CloudflareHybrid or Remote
LeadershipCommunication
Remote