jobapplier

Senior GRC Engineer

Emergent Labs

Skills

Required

  • GRC / security compliance / privacy / risk
  • SOC 2 / ISO 27001
  • GDPR
  • global privacy

Preferred

  • AI
  • EU
  • AI Act
  • Own SOC 2
  • Data Compliance
  • data residency
  • DSARs

Senior GRC Engineer

About Emergent Labs

Emergent builds autonomous coding agents that replace traditional software development by generating, testing, and deploying production applications directly from plain-language intent. Our systems run in production at global scale and are used to build millions of real applications.

Since our public launch, we've crossed $130M in ARR and grown to over 10M users across 190+ countries, who have built 12M+ applications on Emergent. We're backed by

Creaegis, Claypond, Sentinel Global, Khosla Ventures, SoftBank, Google, Lightspeed, Prosus, Together, and Y Combinator.

We're solving the hard part of AI-driven software creation: correctness, reliability, security, and scale in real production systems. The team is built by repeat founders, Olympiad medalists, IIT & IIM alumni, and leaders from

Google, Amazon, and Dropbox.

We're hiring builders who want ownership, speed, and impact at global scale.

Build governance for

Responsibilities

  • Emergent is scaling a global B2C product used across 190+ countries. We’re looking for a GRC Lead to build and run our compliance program across security, privacy, AI, and consumer protection.
  • Certifications & Audits: Own SOC 2, ISO 27001, and related certifications from readiness through audit and renewal.
  • Privacy & Data Compliance: Drive GDPR and global privacy requirements, including data residency, DSARs, DPAs, and records of processing.
  • AI Governance: Define controls for emerging AI regulations, including the EU AI Act, and their application to autonomous code generation and execution.
  • GRC Program: Own policies, controls, evidence collection, vendor/subprocessor risk, and audit readiness.
  • Engineering Partnership: Translate compliance requirements into practical, scalable controls that engineering teams can actually implement.
  • Operate at

Requirements

  • 5 to 7+ years in
  • GRC, security compliance, privacy, or risk
  • Hands-on experience with
  • SOC 2 / ISO 27001
  • Strong understanding of

GDPR and global privacy

  • Experience managing audits, vendors, controls, and compliance programs end to end
  • Ability to work closely with Engineering, Security, Product, and Legal teams
  • Comfortable building GRC programs from the ground up

Preferred

  • practical, scalable controls over paperwork
  • Why Emergent

Benefits

  • global scale across 190+ countries
  • Work directly with founders and core engineering, security, and product teams

You think in

systems, not checklists

Experience with

AI governance, EU AI Act, or cloud-native products

Solve emerging challenges at the intersection of

AI, security, privacy, and regulation