Senior GRC Engineer
AtlanIndia
Posted March 5, 2026
Full Time
About the Company
Atlan is an active metadata platform designed for data teams, offering unified data discovery, cataloging, lineage, and governance across various data sources. It facilitates a two-way movement of metadata to enhance context in tools like BI, making it a leader in the space with recognitions from Gartner and Forrester. Atlan powers data democratization and AI-readiness for numerous companies, having raised $105M in Series C funding.
Job Description
Atlan is building the missing context layer for data and AI, helping enterprises close the AI value chasm and finally move AI pilots into production. The company is seeking a Senior GRC Engineer to own and mature its compliance program across various frameworks and build toward next-generation certifications like FedRAMP. The role sits on the GRC & Platform Security team and operates with significant autonomy.
Requirements
- Compliance program maturity — Lead end-to-end audit execution across SOC 2, ISO 27001, ISO 42001, ISO 27701, HIPAA, and GDPR.
- Next-generation framework adoption — Drive FedRAMP readiness: assess platform gaps, build roadmaps, and turn new certifications into planned projects rather than fire drills.
- Enterprise risk management — Build and mature Atlan's risk management program. Identify, assess, and track risks across security, operational, compliance, and third-party domains.
- Third-party risk management — Own Atlan's vendor security assessment program end-to-end: tiered vendor reviews, security questionnaires, risk scoring, and ongoing monitoring.
- Compliance automation infrastructure — Integrate our GRC platform with cloud infrastructure, CI/CD pipelines, HR systems, and product engineering tooling to automate evidence collection and continuous control testing.
- Controls that prove themselves — Partner with engineering and product teams to design technical controls that automatically generate auditable evidence.
- Continuous controls monitoring — Design and operate real-time visibility into control effectiveness: automated dashboards, live control status, and alerting that surfaces gaps before audit cycles begin — not during them.
- Organizational compliance capability — Build awareness programs, run training for engineering and cross-functional teams, and create self-service dashboards that make compliance easy.
Benefits
- Competitive Compensation
- Health & Wellness
- Flexible Time Off & Leave Policies
- Accelerated Growth & Learning
- AI Native Culture
- Global, Remote-First, High-Trust
