🛠 Tech Stack

💼 About This Role

You'll serve as a risk practitioner and automation engineer for Ro's GRC team. You'll own the compliance platform (Vanta) and lead audit readiness for SOC 2, HIPAA, and HITRUST. This role offers the chance to drive continuous compliance with AI and automation platforms.

🎯 What You'll Do

• Own and maintain the compliance platform (Vanta) for control mapping and evidence collection
• Perform risk assessments, vendor security reviews, and control gap analyses
• Manage control documentation and artifacts across multiple compliance frameworks
• Support internal and external audits (SOC 2, HIPAA, HITRUST)

📋 Requirements

• 5+ years combined GRC, security engineering, or adjacent technical experience
• 3+ years ongoing compliance operations with automated evidence collection
• 2+ years hands-on with continuous compliance platforms (Vanta, Drata, SecureFrame)
• Working knowledge of cloud platforms (AWS, Azure, GCP)

✨ Nice to Have

• Experience with BI tools like Looker or Hex for GRC dashboards
• Ability to automate data ingestion using Python, JavaScript, or APIs
• Advanced GRC automation mindset beyond out-of-the-box tools

🎁 Benefits & Perks

• 🩺 Full medical, dental, and vision insurance
• 💰 401(k) with company match
• 🏖️ Flexible PTO
• 👶 Paid parental leave + fertility benefits
• 📚 Wellbeing & Learning/Growth reimbursements

📨 Hiring Process

Estimated timeline: 3-5 weeks · AI estimate

1. 1Recruiter Screen· 30 min
2. 2Hiring Manager Interview· 45 min
3. 3Technical Interview· 60 min
4. 4Panel Interview· 45 min