Senior Risk & Governance Engineer

Overview

Senior Risk & Governance Engineer to lead automation and engineering for GRC, including compliance testing, evidence collection, risk monitoring, and GRC platform integrations. Own governance architecture for AI and agentic systems at AlphaSense.

What you'll do

• Design and maintain automated compliance testing pipelines that validate control adherence.
• Build integrations and automated evidence connectors for a GRC platform (Drata or equivalent).
• Develop AI-assisted workflows for evidence summarization, control narratives, risk analysis, and policy gap detection.
• Define governance frameworks and control sets governing how AI/agents are built and deployed.
• Implement policy-as-code with version control and enforceable rules and automated checks.
• Instrument controls with observability tooling for continuous control monitoring and alerting.
• Integrate GRC tooling with the broader security stack and engineer automated audit evidence pipelines.

What you'll need

• 6+ years of experience in GRC, information security, risk management, or IT audit.
• Strong understanding of security/compliance frameworks including SOC 2, ISO 27001, NIST CSF 2.0, and CIS Controls.
• Working knowledge of ISO 42001 and NIST AI RMF.
• Proficiency with GRC platforms for evidence management and control testing (Drata, Vanta, AuditBoard, ServiceNow GRC, or equivalent).
• Familiarity with cloud environments (AWS, Azure, or GCP) and tooling such as CSPM and SIEM/identity platforms.
• Coding ability in Python (or equivalent) to call APIs and build integrations.
• Experience supporting external audits and implementing automated control collection/continuous monitoring.

Details

• Location: Pune.