Latest AI JobsBrowse Jobs
Pendo logo

Sr. GRC Engineer

PendoRaleigh, NCInformation Security
Apply on company site
Salary
$133,400 - $160K USD
Job type
Full-time
Posted
24 Sept 2026
Status
Open · checked 7d ago

About this role

The Sr. GRC Engineer position at Pendo is an on-site role based in the Raleigh office, ideal for a security professional with at least three to five years of hands-on experience. This position suits a technical leader who wants to drive governance, risk, and compliance initiatives using AI-first approaches while building durable controls.

Role Overview

Pendo's Information Security team is dedicated to safeguarding company data and embedding privacy and security into product design. The Sr. GRC Engineer acts as an AI-first technical leader to advance the corporate governance, risk, and compliance program. Operating from the Raleigh, NC office, this individual independently directs complex risk, compliance, and incident response duties, pinpoints maturity gaps, and converts technical exposures into business-level insights to guide investment decisions.

Key Responsibilities

Accelerate audit evidence preparation, regulatory research, policy drafting, and control testing workflows through active AI integration.
Manage end-to-end regulatory compliance programs such as SOC 2 Type II, ISO 27001/42001, PCI-DSS, FedRAMP, or GovRAMP, handling control design and auditor interactions.
Conduct organizational risk assessments and present prioritized recommendations to leadership.
Lead incident response activities for multi-system security events, handling investigations, root cause analysis, and post-incident reviews.
Collaborate with product, engineering, and IT departments to embed security into daily operations and establish actionable technical requirements.
Identify maturity gaps across compliance and security operations to shape roadmap recommendations.

Requirements

Possess three to five years of direct, hands-on security experience demonstrating active ownership of compliance programs or security operations.
Demonstrate working knowledge of at least two security frameworks, including SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, or NIST 800-series.
Experience managing complete audit cycles independently, including direct communication with auditors.
Background leading incident response workflows from triage through root cause analysis and remediation documentation.
Proven ability to articulate security risk in business-risk language for leadership decision-making.
Active utilization of AI tools to enhance security workflows like evidence collection or policy drafting.
Strong verbal and written communication skills tailored for various audiences.

Nice to Have

Practical experience using SIEM or EDR platforms such as Elastic, Splunk, CrowdStrike, or SentinelOne for writing and tuning detection rules.
Familiarity with GRC platform administration tools like Archer, Drata, or Vanta.
Background in threat hunting or operationalizing threat intelligence using MITRE ATT&CK.
Holding a professional security certification such as CISSP, CISA, CISM, Security+, or equivalent.
Experience within a SaaS organization managing multiple concurrent compliance frameworks.

Skills and Tools

AI tooling for GRC automation and workflow acceleration
Regulatory compliance frameworks (SOC 2, ISO 27001/42001, PCI-DSS, FedRAMP, GovRAMP, NIST 800-series)
Incident response management and root cause analysis
Risk assessment and business-risk translation
Spark
SIEM and EDR platforms (Splunk, Elastic, CrowdStrike, SentinelOne)
GRC platforms (Vanta, Drata, Archer)

Salary and Benefits

Expected base salary range for Raleigh, NC is $133,400 to $160,000.
Competitive, employer-heavy benefit coverage featuring $0 premium options.
Strong 401(k) match and equity participation.
Flexible time off policy.

About the Company

Founded in 2013 by former product managers, Pendo provides a platform designed to understand and enhance what drives software success, with a mission to improve society's experience with software. Supported by institutions like Battery Ventures, Salesforce Ventures, Spark Capital, and Meritech, Pendo operates on core values that include Bias to Act, Hone Your Craft, The Team is Pendo, and Maniacal Focus. Pendo maintains a hybrid work culture requiring employees to be in the office three days per week unless designated remote.

How to Apply

Interested candidates should visit the official Pendo careers page to submit an application for the Sr. GRC Engineer position.

Skills and tech stack

Spark

Questions candidates ask

What is the location and work arrangement for the Sr. GRC Engineer?

This role is based in the Raleigh, NC office with a hybrid work structure, requiring employees to be in the office three days per week.

What is the expected salary range for this role in Raleigh?

The expected base salary range for this position when performed in Raleigh, NC is $133,400 to $160,000.

How many years of experience are required?

Candidates must have 3 to 5 years of hands-on security experience with demonstrated compliance program or security operations ownership.

What frameworks must a candidate be familiar with?

Candidates need deep working knowledge of at least two frameworks, such as SOC 2, ISO 27001, PCI-DSS, FedRAMP, GovRAMP, or the NIST 800-series.

What benefits are provided by Pendo?

Benefits include employer-heavy coverage with $0 premium options, a strong 401(k) match, equity, and flexible time off.

Ready to apply?

The application is on the official Pendo careers page.

Apply on company site