{"id":4302694,"url":"https://alion.io/job/brex-senior-grc-engineer-2","title":"Senior GRC Engineer","company":{"id":18232,"name":"Brex","domain":"brex.com","url":"https://alion.io/company/brex","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":74,"open_postings":57,"ghost_share":0,"stale_share":0.842,"repost_share":0,"time_to_fill_p50_days":65,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States","New York, United States","Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":153600,"max":192000,"currency":"USD","period":"year","gross":null,"usd_annual":192000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-11-13T23:47:43Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-14T12:48:43Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Why join us\nBrex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks for customers so they can focus on what matters most. Tens of thousands of the world's best companies run on Brex, including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek.\nWorking at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career.\nEngineering at Brex\nEngineering at Brex is about building systems that scale with speed and intention. Our teams operate with high autonomy and deep collaboration, own outcomes end to end, and push for excellence from architecture to deployment. It’s an environment where engineering is a craft and builders grow by solving meaningful technical problems.\nWhat you’ll do\nAs a Senior GRC Engineer at Brex, you’ll lead the IT security compliance workstreams that connect our technical control owners to the people who examine our controls: external auditors, Internal Audit, state regulators, and Finance. You’ll coordinate and test the technical controls behind our financial reporting (SOX/ITGC), our annual SOC 1 Type 2 report, our state money transmitter examinations, and our FINRA IT requirements. You’ll also run the annual business continuity and disaster recovery (BC/DR) testing calendar.\nAs part of the GRC team you may also contribute to the following operational tasks:\nThird party risk management \nRisk register maintenance and reporting\nCustomer Trust / GTM due diligence support\nTooling access requests\nAssist with requests related to other certifications like SOC 2 Type 2, PCI DSS, or ISO 27001\nWhere you’ll work\nThis role will be based in our San Francisco office. We are a hybrid environment that combines the energy and connections of being in the office with the benefits and flexibility of working from home. We currently require a minimum of three coordinated days in the office per week, Monday, Wednesday and Thursday. As a perk, we also have up to four weeks per year of fully remote work!\nResponsibilities\nLead IT SOX/ITGC test procedures, walkthroughs, evidence, workpapers, and remediation across logical access, change management, computer operations, and IT governance.\nManage our annual SOC 1 Type 2 engagement, including external auditor coordination, control descriptions, evidence, deficiency tracking, and review of draft report sections.\nSupport state money transmitter (MTL) examinations by working with Legal, Compliance, and Finance on IT documentation, examiner requests, and tracking of IT findings.\nTest quarterly user access reviews, privileged-access evidence, and segregation-of-duties remediation, and verify that in-scope changes are complete and properly authorized.\nRun the annual BC/DR testing calendar, including tabletop and failover exercises, and document results, evidence, and remediation.\nPrepare FINRA-related IT control documentation, including business continuity, books-and-records, systems access reviews, and readiness testing.\nTrack findings through to closure with clear control owners, deadlines, and evidence, and keep audit coordination separate from control operation.\nSupport broader GRC team operational tasks related to evidence collection, access requests, and risk management.\nRequirements\n5+ years of experience in IT audit, SOX/ITGC testing, GRC, or technology compliance, in fintech, financial services, or public accounting.\nHands-on experience with ITGC testing across logical access, change management, and computer operations, and with documenting results in audit workpapers.\nWorking knowledge of SOC 1 / SSAE 18, including Type 2 reports, control descriptions, and deficiency management.\nFamiliarity with PCAOB standards.\nExperience working with external auditors, regulators, or examiners and responding to their requests on deadline.\nStrong organization and project management skills, with the ability to run several audit workstreams on different calendars at once.\nClear communication, and comfort holding technical control owners accountable for evidence and remediation.\nBonus points\nCISA, CIA, CPA, or CISSP certification.\nExperience with state money transmitter examinations or FINRA IT and books-and-records requirements.\nExperience coordinating BC/DR testing, including tabletop and failover exercises.\nExperience supporting audit readiness during an acquisition or integration.\nFamiliarity with COSO 2013 and COBIT.\nExperience with GRC or audit workflow tools, or with SQL or scripting for control testing.\nCompensation\nThe expected salary range for this role is $153,600 - $192,000. However, the starting base pay will depend on a number of factors including the candidate’s location, skills, experience, market demands, and internal pay parity. Depending on the position offered, equity and other forms of compensation may be provided as part of a total compensation package.\nBrex LLC is a wholly owned subsidiary of Capital One, N.A.\nPlease be aware, job-seekers may be at risk of targeting by malicious actors looking for personal data. Brex recruiters will only reach out via LinkedIn or email with a brex.com domain. Any outreach claiming to be from Brex via other sources should be ignored.","description_format":"text","description_chars":5842,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Financial Software & Embedded Finance","Procurement & Spend Management"],"lifecycle":[{"event":"open","at":"2026-11-14T04:27:33Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 25 · green card filings: 2","filings_12m":25,"filings_prev_12m":31,"green_card_filings_12m":2,"median_offered_wage_usd":179352,"route":null,"cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":65,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":{"stated_usd_annual":192000,"is_top_pay":true},"html_url":"https://alion.io/job/brex-senior-grc-engineer-2","json_url":"https://alion.io/job/brex-senior-grc-engineer-2.json","meta":{"generated_at":"2026-11-14T14:50:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15949,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18232},"rest":"https://alion.io/mcp/rest/get_company?id=18232"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrex-senior-grc-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrex-senior-grc-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrex-senior-grc-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brex-senior-grc-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrex-senior-grc-engineer-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4302694}},{"tool":"search_jobs","arguments":{"company":"brex.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4302694},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}