Sr. GRC Engineer

New York, NY or Remote · Senior

Sponsorship not specified$148k-$175kDetected 152 days ago

JavaScriptPythonFull-Stack DevelopmentAWSGCPAzureData VisualizationComplianceLogisticsHIPAA

About the role

2+ years of hands-on experience implementing and administering continuous compliance and evidence automation platforms (e.g., Vanta, Drata, SecureFrame), including configuring and creating custom integrations as well as optimizing automated evidence workflows.

Own and maintain the compliance platform (Vanta), including control mapping, evidence collection, continuous monitoring, and audit workflows
Perform risk assessments, vendor security reviews, and control gap analyses, and track remediation through to completion
Manage control documentation, policies, procedures, and supporting artifacts across multiple compliance frameworks
Partner with Security, IT, Infrastructure, and Engineering teams to ensure technical and administrative controls align with documented policies and compliance requirements
Support internal and external audits (SOC 2, HIPAA, HITRUST)
Own and maintain the cyber risk register, collaborating with risk owners to quantify risks and develop remediation plans.
Develop and maintain risk reporting, metrics, and executive summaries with BI tools (Looker, Hex, etc)
Working knowledge of cloud computing platforms (AWS, Azure, GCP) and how their native services and configurations support security and compliance requirements.
Expertise in using Looker (or similar BI tool; HEX) to create dashboards, generate reports, and visualize GRC data for stakeholders, with a focus on simplifying complex data into actionable insights.
We're building a new system.

3+ years of experience with ongoing compliance operations, with demonstrated progression from manual evidence collection to automated, continuously monitored controls.
Ability to automate data ingestion, transformation, and reporting using scripting or programmatic approaches (e.g., Python, JavaScript, APIs, Tines.)
Kindness, and an ability to communicate to all levels of the organization

The target base salary for this position ranges from $148,000 to $175,000, in addition to a competitive equity and benefits package (as applicable).

Join Tech @ Ro to build the future of healthcare, from the ground up!
At Ro, we believe that when people achieve their health goals, they can achieve their life goals.
The highest-leverage way to move society forward is to give people their health, and the current healthcare system isn't built to do that.
We've built a vertically integrated healthcare platform that connects telehealth, diagnostics, pharmacy, and logistics into a seamless, end-to-end experience for millions of patients.
The target base salary for this position ranges from $148,000 to $175,000, in addition to a competitive equity and benefits package (as applicable).
Ro is consistently recognized as a top workplace in Health Care, in New York, and for Women and Parents-earning more than 20 honors from Fortune, Great Place to Work, and PEOPLE since 2021.
In 2025 alone, we ranked top 5 among medium workplaces in Health Care and New York, and top 50 nationwide.
At Ro, we believe that our diverse perspectives are our biggest strengths - and that embracing them will create real change in healthcare.

5+ years of combined experience across governance, risk, compliance, security engineering, or adjacent technical roles, including hands-on experience working with compliance frameworks such as SOC 2, HIPAA, HITRUST, NIST, and PCI in modern, technology-driven environments.
As part of Tech @

If you require a reasonable accommodation in the application or interview process, please contact us at talent@ro.co.

This listing is sourced directly from Ro's careers page and normalized into a canonical job model.