Aircall

Aircall

Senior GRC Engineer

New York Office · Senior

Sponsorship not specified$180k-$200kDetected 219 days ago
PythonGoAWSGCPTerraformCI/CDIncident ResponseComplianceJiraHRISHIPAALeadershipCommunication

About the role

  • We're redefining customer communications by bringing voice, SMS, WhatsApp, and AI together into one seamless workspace.
  • Our momentum comes from a simple idea: help teams work smarter, not harder.
  • The result is higher revenue, faster resolutions, and teams that scale with confidence.

Responsibilities

  • Design, implement, and operate technical controls that satisfy SOC 2, ISO 27001, NIST, and GDPR requirements across our cloud (AWS), SaaS, and corporate environments.
  • Build and maintain integrations between our GRC platform (Drata) and source systems - IdP, cloud providers, ticketing, code repositories, HRIS, endpoint management - to automate evidence collection and continuous control monitoring.
  • Support and progressively automate audit readiness: SOC 2 Type II, ISO 27001 (and any future certifications such as HIPAA, FedRAMP, PCI as the strategy evolves), preparing evidence, walking auditors through controls, and remediating findings.
  • Build and run the technical side of the vendor security program - questionnaire automation, tiering, evidence review, and ongoing monitoring of critical vendors.
  • Partner with IT, Product, and Engineering to embed security and compliance requirements into the SDLC, change management, access reviews, and infrastructure provisioning.
  • Contribute to incident response from the GRC side: maintain runbooks and policies, ensure regulatory and contractual notification timelines are met, and capture evidence and lessons learned.
  • Partner with Legal/Privacy on GDPR obligations, data residency, DPAs, and customer security commitments.
  • Author and maintain security policies and standards in clear, accurate language that engineers will actually read.
  • We're working to create a place filled with diverse people who can enrich and learn from one another.
  • We're committed to ensuring that everyone not only has a seat at the table but is valued and respected at it by providing equal opportunities to develop and thrive.

Requirements

  • 5+ years in security, with at least 2-3 years in a GRC engineering, security engineering, or compliance automation role at a SaaS or cloud-native company.
  • Strong working knowledge of SOC 2, ISO 27001, NIST CSF / 800-53, and GDPR, and what it takes to actually operate (not just pass) them.
  • Hands-on experience with a modern GRC platform (Ideally Drata) - including building or extending its integrations, not just clicking through the UI.
  • Working knowledge of risk management frameworks and vendor security assessment.
  • Strong written communication - you can turn a control requirement into a clear ticket, runbook, or policy that gets adopted.
  • Comfortable using AI tools to accelerate delivery and scale impact.
  • Comfortable writing code (Python, Go, or similar) and working with cloud APIs (AWS), Terraform/IaC, and CI/CD pipelines.
  • Solid understanding of cloud security, identity and access management, and how engineering teams ship software.
  • Experience supporting external audits as a technical lead and remediating findings.
  • Bonus: relevant certifications (CISA, CISSP, ISO 27001 LI/LA, AWS/GCP security), experience with privacy engineering, or prior work building a GRC function from early stage to audit-ready.

Nice to have

  • relevant certifications (CISA, CISSP, ISO 27001 LI/LA, AWS/GCP security), experience with privacy engineering, or prior work building a GRC function from early stage to audit-ready.
  • Promote a security-first culture across all functions, ensuring employees understand their role in protecting company and customer data.

Compensation

  • Why join us? 🚀 Key moment to join Aircall in terms of growth and opportunities 💆‍♀️ Our people matter, work-life balance is important at Aircall 📚 Fast-learning environment, entrepreneurial and strong team spirit 🌍 45+ Nationalities: co

Benefits

  • At Aircall, we believe diversity, equity and inclusion - irrespective of origins, identity, background and orientations - are core to our journey.
  • We will constantly challenge ourselves to make sure that we live up to our ambitions around diversity, equity and inclusion, and keep this conversation open.

Company info

  • help teams work smarter, not harder.
  • Aircall's AI Voice Agent automates routine calls, AI Assist streamlines post-call work, and AI Assist Pro delivers real-time guidance so people can do their best work.
  • Aircall is headquartered in Paris, our European HQ, with a strong North American presence anchored in Seattle, our North American HQ, and teams across Madrid, London, Berlin, San Francisco, New York City, Sydney, and Mexico City.
  • We've built a product customers love and a business that's scaling quickly, backed by world-class investors and driven by rapid AI innovation across multiple product lines.
  • At Aircall, you'll join a company in motion.
  • We're ambitious, product-driven, and execution-focused, with visible impact, fast decisions, and real growth.
  • Aircall is a unicorn, AI-powered customer communications platform used by 22,000+ companies worldwide to drive revenue, resolve issues faster, and scale customer-facing teams.
Apply directly at Aircall →Create a free account for alerts like thisView Aircall immigration profile

This listing is sourced directly from Aircall's careers page and normalized into a canonical job model.