Gridware
Compliance Engineer
San Francisco, CA
No sponsorship$120k-$145kDetected 119 days ago
DevOpsComplianceCommunication
About the role
- We pioneered a groundbreaking new class of grid management called active grid response (AGR), focused on monitoring the electrical, physical, and environmental aspects of the grid that affect reliability and safety.
Responsibilities
- Design a unified control framework mapped across SOC 2, ISO 27001, CIS IG3, NERC CIP, and NIST (CSF/800-53), eliminating duplication and creating a single source of truth for compliance posture.
- Develop and maintain a control library, policy inventory, and risk register.
- Build a structured, repeatable evidence collection process supporting concurrent audits across all frameworks.
- Maintain a continuously updated evidence repository and coordinate with Engineering, DevOps, HR, and Legal to gather and validate artifacts.
- manage schedules, fieldwork, and findings remediation through to closure.
- Own intake, triage, and completion of customer security questionnaires (SIG Lite, CAIQ, custom assessments).
- Maintain a living questionnaire knowledge base and develop customer-facing security documentation, including trust portal content.
- Serve as primary liaison with external auditors; manage schedules, fieldwork, and findings remediation through to closure.
- Ability to perform cross-framework control mapping and identify gaps or conflicts.
- CISA, CRISC, ISO 27001 Lead Implementer/Auditor, or NERC CIP.
Requirements
- 2-4 years in information security compliance, GRC, or a related discipline.
- Working knowledge of two or more: SOC 2, ISO 27001, NIST CSF/800-53, CIS Controls, NERC CIP.
- Experience supporting or leading external audits, including evidence collection and auditor coordination.
- Hands-on experience with NERC CIP (CIP-002 through CIP-014) in an OT or critical infrastructure environment.
- Familiarity with GRC platforms such as Vanta, Drata, OneTrust, or Archer.
- We're only able to consider candidates who are currently authorized to work in the country of employment without visa sponsorship now or in the future.** This describes the ideal candidate
- many of us have picked up this expertise along the way.
Skills
- About Gridware Gridware is a San Francisco-based technology company dedicated to protecting and enhancing the electrical grid.
- This comprehensive approach helps improve safety, reduce outages, and ensure the grid operates efficiently.
- The company is backed by climate-tech and Silicon Valley investors.
- For more information, please visit www.Gridware.io.
Compensation
- Benefits Health, Dental & Vision (Gold and Platinum with some providers plans fully covered) Paid parental leave Alternating day off (every other Monday) "Off the Grid", a two week per year paid break for all employees.
Benefits
- Health, Dental & Vision (Gold and Platinum with some providers plans fully covered) Paid parental leave Alternating day off (every other Monday) "Off the Grid", a two week per year paid break for all employees.
- Commuter allowance Company-paid training
Company info
- Even if you meet only part of this list, we encourage you to apply!
Visa & Work Authorization
- At this time, Gridware is unable to provide visa sponsorship or immigration support for this role.
Apply directly at Gridware →Create a free account for alerts like thisView Gridware immigration profile
This listing is sourced directly from Gridware's careers page and normalized into a canonical job model.