About this role
AlphaSense's GRC team is building an automated, AI-native governance and compliance engineering function designed to handle modern cloud infrastructure and agentic systems. This role exists to move the organization away from manual, point-in-time compliance checks toward continuous, code-driven evidence generation and risk monitoring. The incoming engineer will design technical compliance testing pipelines, own GRC platform integrations, and establish the governance architecture for how AI and agentic systems are deployed.
An ideal candidate sits at the intersection of security engineering and compliance operations, bringing practical experience with LLMs and automated workflows. The person taking on this responsibility enjoys building infrastructure as code, anticipating regulatory standards before they become mainstream, and collaborating across engineering, legal, and product teams to scale risk management without proportional headcount growth.
What you will do
- Design and maintain automated compliance testing pipelines that continuously validate control adherence across internal systems, SaaS platforms, and cloud infrastructure.
- Configure and integrate GRC platforms like Drata while building custom API connectors to eliminate manual control owner burdens.
- Develop AI-assisted workflows using LLMs and agentic frameworks for evidence summarization, policy gap detection, and risk analysis.
- Establish governance frameworks, control sets, and compliance postures specifically for AI and agentic systems.
- Build the policy program as code by placing policies in version control and expressing requirements as enforceable automated checks.
- Instrument controls with observability tooling to provide engineering and product teams with real-time visibility into risk posture.
What you need
- Have at least six years of professional experience in information security, GRC, risk management, or IT audit within a cloud-native or SaaS environment.
- Demonstrate a strong understanding of compliance and security frameworks such as SOC 2, ISO 27001, CIS Controls, and NIST CSF 2.0, alongside working knowledge of NIST AI RMF and ISO 42001.
- Possess an AI-native mindset with practical experience using LLMs, agents, and automation for substantive tasks like evidence gathering and workflow execution.
- Show proficiency with GRC platforms designed for control testing and evidence management, including tools like Drata, Vanta, AuditBoard, or ServiceNow GRC.
- Bring familiarity with cloud environments across AWS, Azure, or GCP, as well as the security posture tooling that operates on them.
- Offer hands-on experience supporting external audits across privacy or security domains, including control walkthroughs and auditor interactions.
- Demonstrate practical background in implementing automated control collection and continuous control monitoring pipelines.
Skills and tech stack
Questions candidates ask
What kind of GRC platform experience is required?
Candidates need proficiency with GRC platforms for evidence management and control testing, such as Drata, Vanta, AuditBoard, ServiceNow GRC, or equivalent systems.
What frameworks will this team work with?
The team works with security and compliance frameworks including SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls, along with working knowledge of ISO 42001 and NIST AI RMF.
Where is the company located?
AlphaSense is headquartered in New York City with more than 2,000 employees globally and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. This specific role is based in Pune.
The application is on the official AlphaSense India careers page.
Apply on company site