Governance, Risk, and Compliance Engineer, Clerk
+ Equity
Authentication and user management
Be an early applicant
Authentication and user management
201-500 employees
Be an early applicant
+ Equity
201-500 employees
Company mission
To solve user management once and for all.
Role
Who you are
- 5+ years in security, with demonstrated experience building automation for a GRC or compliance program
- You've been the technical owner of at least one SOC 2 Type II or ISO 27001 audit and can tell us what you would do differently
- You write code, and you use LLMs to get more done without lowering the bar
- Hands-on with a GRC platform's API, not just its dashboard
- Cloud IAM and configuration depth on at least one provider, GCP preferred
- You can decide what evidence is sufficient and defend an automated test to an auditor
- Comfortable being one of a few security engineers; you can scope, prioritize, and ship without a lot of process around you
- Clear writer: policies, control narratives, and questionnaire answers are read by customers, so they have to be good
Desirable
- Experience at an all-remote company
- Shipped LLM or agentic workflows in production for compliance work
- Experience at a developer-tools company
What the job involves
- Clerk is looking for a Senior GRC Engineer to join our Security Team. Our customers put Clerk in the middle of their authentication flow, and every one of them runs us through their own vendor review before they do. You'll own the program that makes that review easy: the controls, the evidence, the audits, and the answers
- You'll work as a hands-on engineer. Expect to spend a lot of your time writing integrations, automations, and internal tools that enforce policies and automate the evidence gathering. The goal is a program that's always current, so an audit is just someone observing it rather than a quarterly scramble
- Own SOC 2 Type II and HIPAA end to end: scoping, control design, evidence, auditor walkthroughs, and remediation
- Scope and lead our next framework (ISO 27001 is the likely candidate) based on what customers actually ask for
- Build and maintain the integrations that feed our GRC platform from our cloud providers, SaaS tools, and internal systems
- Turn controls into continuous checks: policy-as-code, config drift detection, and a control-failure pipeline from detection to closure
- Run the vendor security review program, from intake to periodic re-review
- Own the security questionnaire and trust center workflow
- Maintain the risk register and run risk assessments that produce documented decisions
- Embed compliance requirements into the SDLC and change management so they're enforced by tooling, not by reminders
- Reduce the number of things a human has to do to pass an audit every quarter
Our take
Authentication is only part of the story when it comes to user management. Developers using API tools also face the complex UI and management issues of additional features like user sign-up, sign-in, and session management, to name a few. Clerk was founded to make this simpler, reducing hours of work to minutes using pre-built React components.
Clerk stands out in a market dominated by the likes of Auth0 and OneSpan with its focus on React rather than API. This taps into a growing number of developers working with Jamstack rather than trying to wrestle customers away from market incumbents - a smart move which has seen its userbase swell by five times, growing to over a million developers.
This rapid growth has attracted investors, and Clerk closed a Series B round in 2024. This funding is being used to expand the company's services into authorisation - determining a user's permissions as opposed to simply identifying them. As account security and management will continue to be a major focus for developers going forward, Clerk is well positioned to grow into a major player in this space, especially as it continues to expand its product range.
Steph
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 7 rounds)
Oct 2025
$50m
SERIES C
Jan 2024
$30m
SERIES B
Total funding: $109m
Company benefits
- Competitive salary: We want you to know that we value the skills you bring to the table, so we go out of our way to make sure you’re fairly compensated.
- Equity ownership: At Clerk, we believe in shared success, which is why we offer a stock option plan that everyone stands to benefit from as we grow.
- Health coverage: We care about your well-being, so we offer top-tier health insurance to ensure your health needs are met. (US-based employees)
- Work equipment: We’ll make sure you have everything you need to set up your ideal home office with the gear of your choice.
- Flexible vacation policy: We're believers in work-life balance and trust you to take the time you need with our unlimited vacation policy.
- Remote and diverse team: We're committed to fostering an inclusive environment where you can do the best work of your life with a global, fully-remote team.
Company HQ
SoMa, San Francisco, CA
Leadership
Colin Sidoti
(Co-Founder)Prior to co-founding Clerk in 2019, Colin was an Independent Consultant for nearly 8 years. He also spent 1 year at We-Care.com as a Web Developer.
Braden Sidoti
(Co-Founder & CTO)Previously a Member of the South Park Commons. He was also an iOS Engineering Manager at Inspirato and an iOS Developer at hostess.fm and Fuzz Productions.
Share this job
View 1 more job at Clerk