Senior GRC Engineer, Trust

About the role

The InfoSec organization at Chainalysis protects the company, its products, and its customers as the business scales. As a Senior GRC Engineer you will lead technical control implementation, own remediation work end‑to‑end, and improve evidence‑gathering processes to support a scalable security and compliance program.

Key responsibilities

• Partner with Product, R&D Engineering, Security Engineering and other teams to implement and operationalize security and compliance controls across Chainalysis products.
• Own end‑to‑end remediation of compliance and security findings, from gap identification through validation and closure.
• Build scalable evidence‑collection and control‑testing workflows that improve audit readiness and reduce manual effort.
• Drive continuous control improvement across a segmented product suite and support product and risk review processes.

Required profile

• Experience implementing and operating security or compliance controls in a cloud, SaaS, or regulated technology environment.
• Proven ability to build repeatable evidence‑collection, control‑testing, or remediation workflows that improve audit readiness.
• Strong communication skills to explain risk, trade‑offs, and remediation plans to both technical and non‑technical audiences.
• Experience supporting assurance programs such as SOC 2, ISO 27001, or similar frameworks.

Required skills

• AWS
• Terraform (Infrastructure as Code)
• Vanta
• Jira
• Okta