Sr. GRC Engineer

About the role

Pendo's Information Security team protects the data entrusted to Pendo and helps ensure our products are built with security and privacy by design. The Sr. GRC Engineer is an AI-first technical leader who drives governance, risk, and compliance program maturation and incident response. This role is based in our Raleigh office.

What you'll do

• Use AI to accelerate audit evidence preparation, policy documentation, control testing workflows, and regulatory research.
• Evaluate GRC platform automation and integrate AI tooling that reduces manual overhead, then share effective approaches with the team.
• Own one or more regulatory programs end to end, including design, evidence collection, auditor relationships, and remediation tracking.
• Identify maturity gaps in compliance and security operations and translate them into prioritized roadmaps grounded in business risk.
• Lead incident response for complex security events, including root cause analysis and post incident improvements.
• Partner with engineering, product, and IT to embed security into day to day operations and translate obligations into actionable requirements.

What they're looking for

• 3 to 5 years of hands on security experience with demonstrated ownership of compliance programs or security operations.
• Deep working knowledge of at least two frameworks among SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, or the NIST 800-series.
• Ability to independently own auditor relationships and manage an audit cycle end to end.
• Experience leading incident response investigations from triage through post incident documentation.
• Ability to translate security risk into business risk language for leadership decisions.
• Active, demonstrated use of AI tools to accelerate security workflows such as evidence collection or policy drafting.

For applicants in Nigeria

• The listing does not specify Nigeria eligibility; confirm before interviewing.
• The role is based in Raleigh with in office requirements; no Nigeria timezone guidance is stated; confirm expectations before interviewing.
• The listing does not state contractor versus employee status.
• Pay is stated in USD as a Raleigh, NC base range of $133,400 to $160,000; Nigeria-specific pay is not provided.
• No visa or work authorization notes are provided; confirm whether any visa would be required.