Senior GRC Engineer, Flock
$130-150k
+ Stock Options
Public safety operating system
Open for applications
Public safety operating system
1001+ employees
Open for applications
$130-150k
+ Stock Options
1001+ employees
Company mission
To create safer, happier communities and cities by pre-emptively fighting crime.
Role
Who you are
- 5+ years in GRC, security engineering, or related roles
- Experience working in cloud-native environments, AWS is a must
- Experience supporting audits such as SOC 2, ISO 27001, or similar
- Relevant certifications such as CISA, CRISC, FAIR, AWS Security Specialty, ISO 27001/42001 Lead Auditor certifications a plus
- Experience integrating security and compliance into CI/CD pipelines
- Ability to work with APIs, automation tools, or scripting languages
- Experience implementing policy-as-code, compliance-as-code, or security-as-code frameworks
- Familiarity with tools such as Terraform, CloudFormation, or similar IaC frameworks
- Thinks in terms of systems and scale, not manual tasksâautomating repetitive work wherever possible
- Curious about and experienced with applying AI to operational problems, especially in security or compliance
- Comfortable experimenting with emerging technologies and rapidly evolving tooling
- Focused on signal over noise, reducing manual overhead while increasing accuracy
- Strong understanding of frameworks such as SOC2 Type II, NIST 800-53, ISO 27001, and CJIS
- Experience with third-party risk management and vendor assessments
- Ability to translate regulatory requirements into technical controls
- Automation-first thinking
- Strong problem-solving skills and ownership mentality
- Ability to balance security, compliance, and business needs
- Ability to collaborate effectively with engineering, security, and business stakeholders
- Feeling uneasy that you havenât ticked every box? Thatâs okay; weâve felt that way too. Studies have shown women and minorities are less likely to apply unless they meet all qualifications. We encourage you to break the status quo and apply to roles that would make you excited to come to work every day
What the job involves
- We are hiring a Senior GRC Engineer to build and scale an engineering-driven, automation-first, and AI-enabled approach to Governance, Risk, and Compliance (GRC)
- This role goes far beyond traditional GRC. You will design and implement intelligent, automated systems that integrate directly into our engineering and cloud environmentsâtransforming compliance from a manual, point-in-time exercise into a continuous, real-time capability
- You will leverage automation, data pipelines, and emerging AI/LLM capabilities to reduce manual effort, improve signal quality, and enable proactive risk management
- This is a high-impact role at the intersection of security engineering, compliance, and dataâhelping evolve GRC into a measurable, scalable, and product-aligned function
- Build GRC Engineering Capabilities:
- Design and implement policy-as-code and compliance-as-code frameworks
- Automate control testing and evidence collection using cloud and CI/CD telemetry
- Integrate GRC processes with engineering tools and workflows
- Develop reusable tooling and internal platforms for scalable, self-service compliance
- Build and deploy production-grade automation leveraging LLMs and AI tooling (e.g., for control mapping, evidence analysis, and anomaly detection)
- Own the design, development, and maintenance of core GRC automation systems and services
- Drive Risk Visibility and Measurement:
- Develop KPIs and KRIs using engineering and cloud data
- Support risk quantification efforts using frameworks such as FAIR
- Maintain and improve the security risk register
- Apply data modeling and AI techniques to identify emerging risks and reduce false positives
- Build automated risk scoring and prioritization models using real-time engineering and security data
- Support Audits and Certifications
- Lead and support audits including SOC 2, ISO 27001, ISO 27701, FedRAMP and CJIS
- Build automated audit readiness and continuous compliance processes
- Serve as a key point of contact for internal and external auditors
- Partner Across the Business:
- Work with Product and Engineering teams on security and privacy requirements
- Support customer security reviews, RFIs, and trust center initiatives
- Collaborate with Legal and Privacy teams on regulatory alignment
- Third-Party Risk Management:
- Automate vendor assessments using AI-assisted questionnaire analysis and response validation
- Build workflows to ingest, analyze, and score third-party risk data at scale
- What Success Looks Like:
- GRC processes are automated and integrated into engineering workflows
- Audit readiness becomes continuous rather than periodic
- Risk is measured using real-time data and clear metrics, tied to revenue
- Engineering teams experience GRC as an enabler, not a blocker
- Customer trust and security assurance scale with company growth
- Manual GRC processes are replaced with intelligent, automated workflows
- AI-assisted systems reduce audit preparation time and improve evidence quality
- GRC insights directly influence engineering prioritization and business decision-making
- The First 30 Days:
- Ramp on systems, architecture, and existing GRC processes
- Build relationships with Engineering, Security, and Legal
- Identify initial automation opportunities
- The First 60 Days:
- Begin implementing automation for control testing and evidence collection
- Contribute to audit readiness and ongoing compliance efforts
- Define KPIs/KRIs for risk visibility
- 90 Days & Beyond:
- Deliver measurable improvements in GRC automation and efficiency
- Launch initial AI-assisted workflows
- Influence roadmap for long-term GRC engineering strategy using a crawl, walk, run approach
Our take
Public vehicle surveillance provides valuable insights to emergency services for the prevention of crime, but bringing information together to create leads is difficult. There's no standardised system for inter-city vehicle surveillance, and this makes it difficult for communities and law enforcement services to work together.
Flock provides surveillance equipment that aims to improve the abilities of law enforcement and homeowner associations to communicate data with each other. The company focuses on vehicle surveillance, innovating on existing technology by using machine learning to categorise vehicles by color, license plate, state, and other data points.
Whilst automated surveillance equipment is used daily within federal police forces, Flock builds technology systems that provide a means for smaller law enforcement agencies to quantify and share surveillance data easily. The company has raised strong funding to support the expansion of its manufacturing capabilities. But it has also faced a large dose of backlash from groups and individuals who are concerned about its capability for mass surveillance and the privacy of the data it collects.
Steph
Company Specialist at Welcome to the Jungle
Insights
40% employee growth in 12 months
Company
Funding (last 2 of 10 rounds)
Mar 2025
$275m
LATE VC
Mar 2024
$200m
SERIES G
Total funding: $857.8m
Company benefits
- đ´Use what you need PTO: We seriously mean it, plus 11 company holidays and your birthday off!
- âď¸Fully-paid health benefits plan for employees: including Medical, Dental, and Vision and an HSA match
- đŞFamily Leave: We provide 16 weeks of 100% paid leave for primary caregivers and 12 weeks of 100% paid leave for secondary caregivers
- đźFertility & Family Benefits: We have partnered with Maven, a complete digital health benefit for starting and raising a family. We will reimburse $10,000 a year for adoption, surrogacy, or infertility
- đ§ Mental Health: All employees receive an annual subscription to Headspace
- đCaregiver Support: We have partnered with Cariloop to provide our employees with caregiver support
- đ¸Carta Tax Advisor: Employees receive 1:1 sessions with Equity Tax Advisors who can address individual grants, model tax scenarios, and answer general questions
- đťWFH Stipend: $150 per month to cover the costs of working from home
- đL&D Stipend: $250 per year to use on Audible, Calm, Masterclass, Duolingo, Grammarly and so much more
- đ Home Office Stipend: A one-time $750 to help you create your dream office
- đ˘Coworking Space: If youâre not local to our ATL HQ, weâll provide $250 a month to get you set up with an All Access Membership to WeWork (or a local coworking space in your area)
- đžPet Insurance: Weâve partnered with Pumpkin to provide insurance for our employeeâs fur babies
Company HQ
Home Park, Atlanta, GA
Leadership
Garrett Langley
(Founder & CEO)They worked in Computer Services freelance for over 6 years before joining Firethorn in 2015, and Clutch Technologies in 2014. They left their position as President of Moment LLC to found Flock Safety in April 2017.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 21 more jobs at Flock