Kikoff
Staff GRC Engineer
San Francisco · Staff+
Sponsorship not specified$53k-$800kDetected 20 hours ago
GitCloud PlatformsLLMsCybersecurityComplianceValuationCommunication
About the role
- The function is engineering-led, with a strong emphasis on automation, code-backed control operations, and AI-assisted evidence workflows.
Responsibilities
- Own Kikoff's SOC 2 Type II program end-to-end, including scoping, control design, evidence collection, walkthroughs, and external auditor management.
- Own the customer and vendor security questionnaire pipeline, including reusable evidence libraries and a self-serve trust portal.
- Design and operate the internal cybersecurity control testing and continuous monitoring program in partnership with Security Engineering.
- Build policy-as-code, compliance-as-code, and AI-driven evidence automation that scales with the engineering organization.
- Has owned at least one SOC 2 Type II cycle end-to-end, including design, evidence, walkthroughs, and auditor defense.
Requirements
- 7+ years of experience in security compliance, GRC, or technical audit, with a primary focus on cloud-native environments.
- Hands-on experience with PCI DSS, including SAQ environments and tokenization-driven scope reduction.
- Demonstrated experience managing external auditors and translating control requirements into engineering deliverables.
- Excellent written communication, with the ability to produce auditor-ready documentation and engineering-ready specifications.
Nice to have
- Prior experience as a control owner supporting SOX IT general controls audits in a pre-IPO or newly public company.
- Background in IPO readiness or newly public company environments.
- Familiarity with ISO 27001, ISO 42001, FedRAMP, CMMC 2.x, or NIST 800-53.
- Equal Employment Opportunity Statement
- Kikoff Inc. is an equal opportunity employer.
- Please reference the following for more information.
Compensation
- Maintain Kikoff's PCI DSS self-attestation, including annual SAQ completion, scope analysis to ensure cardholder data remains with our payment processors, payment-vendor oversight, and monitoring product and engineering changes that could expand scope.
Equal opportunity
- We are committed to complying with all federal, state, and local laws providing equal employment opportunities and considers qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class.
Visa & Work Authorization
- in, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other legally protected class
This listing is sourced directly from Kikoff's careers page and normalized into a canonical job model.