{"id":2189761,"url":"https://alion.io/job/reflection-ai-grc-engineer","title":"GRC Engineer","company":{"id":48184,"name":"Reflection AI","domain":"reflection.ai","url":"https://alion.io/company/reflection-ai","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":84,"open_postings":44,"ghost_share":0.182,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":85,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":191000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":374},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST 800-171","optional":false},{"name":"NIST 800-53","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-09T15:48:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-12T06:33:05Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"Our Mission\nReflection is a research lab making intelligence open and accessible for everyone to use, customize, and build on. We build open models that let anyone control their intelligence and help shape the future of AI. Our mission: make intelligence open and accessible to all.\nRole summary\nReflection AI's Compliance and AI Governance function spans six pillars: AI Governance, Data Governance, Trade Compliance, Privacy Operationalization, Government Contracting Compliance, and Corporate Compliance. The team builds the policies, controls, and operating rhythms that let the company move fast while staying defensible with regulators, customers, and partners. This role sits at the intersection of compliance and engineering, partnering most closely on technical controls required by Security frameworks, AI Governance frameworks, Privacy, and Data Governance pillars to translate policy requirements into technical controls that scale.\nWe're looking for a Governance, Risk, & Compliance engineer who wants to work on compliance as a product problem rather than a paperwork problem. You'll build and maintain the technical infrastructure (tooling, pipelines, automated controls, evidence collection) that lets the compliance program operate at engineering scale instead of through manual review. A core part of the job is keeping our security framework compliance (SOC 2, ISO 27001, NIST) running on automated evidence rather than manual screenshotting, and building out the technical side of our Trade Compliance, Privacy, Data Governance, and TPRM program. You'll be the technical translator between compliance requirements and the engineering and security teams that have to implement them.\nWhat You'll Do\nDesign and build automated controls and monitoring that satisfy security framework requirements (SOC 2, ISO 27001, NIST 800-53/800-171, CMMC): access reviews, data minimization, model/data lineage, continuous evidence collection\n\nPartner with Engineering, Security, and IT to implement technical requirements arising from security frameworks, deemed export controls, and privacy regulations\n\nBuild and maintain internal tooling that supports compliance workflows (intake forms, screening checks, reporting dashboards, GRC platform integrations such as Vanta)\n\nTranslate regulatory and policy requirements into concrete technical specifications engineering teams can implement\n\nSupport technical due diligence for inbound customer security questionnaires, audits, and outbound vendor assessments\n\nMaintain integrations between compliance/GRC systems and source-of-truth systems (identity, data infrastructure, model pipelines)\n\nHelp scope and support technical environment separations or system boundaries required for regulatory compliance (e.g., subsidiary or enclave environments)\n\nWhat We're Looking For\n3-6 years of software engineering, security engineering, or DevOps/infrastructure experience\n\nHands-on experience supporting at least one security framework (SOC 2, ISO 27001, or NIST) as an engineer, not just as a subject\n\nComfortable writing production-quality code (Python, or similar) and working with APIs/integrations\n\nExperience translating non-technical requirements (policy, regulatory, contractual) into technical implementation\n\nFamiliarity with cloud infrastructure and identity/access management concepts\n\nStrong collaboration skills; able to work effectively with compliance, legal, and engineering stakeholders who don't share a common vocabulary\n\nExperience building or maintaining GRC tooling, TPRM/vendor risk platforms, or compliance automation (e.g., Vanta or similar)\n\nFamiliarity with one or more relevant frameworks: CMMC, NIST 800-171/800-53, SOC 2, ISO 27001, GDPR/CCPA technical requirements\n\nExperience with data governance or data lineage tooling, especially in ML/AI pipelines\n\nBackground supporting a government contracting or regulated environment\n\nWhat We Offer:\nWe believe that to make intelligence open and accessible to all, you need to start at the foundation. Joining Reflection means building from the ground up as part of a talent-dense team. You will help define our future as a company, and help define the future of open foundational models.\nWe want you to do the most impactful work of your career with the confidence that you and the people you care about most are supported.\nTop-tier compensation: Salary and equity structured to recognize and retain our talent globally.\n\nStock options: Everyone who joins and contributes to Reflection's success gets to share in the upside through stock options.\n\nHealth & wellness: Comprehensive medical, dental, vision, and life, with an annual wellness allowance.\n\nMeals: Lunch and dinner are provided in the office daily.\n\nLife & family: 22 weeks paid parental leave for all new birthing and non-birthing parents, including adoptive and surrogate journeys.\n\nVacation days: Unlimited paid time off in the U.S. and 30 days in the U.K.\n\nSponsorship support: We sponsor visas to help exceptional talent join our team and support long-term immigration pathways where applicable.\n\nTeam building: We have regular off-sites, happy hours, and team celebrations.\n\nExport Control Notice: This position may require access to technology or source code subject to the U.S. Export Administration Regulations. Any offer of employment for this role may be conditioned on the Company's ability to provide the candidate with access to such technology or source code in compliance with applicable U.S. export control laws, which may require the Company to seek government authorization.\nCandidate and Employee Privacy Notice: We collect and process personal data about applicants for the purposes described in our Candidate and Employee Privacy Notice","description_format":"text","description_chars":5739,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Stock options"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Foundation Models","AI Research Labs"],"lifecycle":[{"event":"open","at":"2026-10-09T17:29:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 35","filings_12m":35,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":188214,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":85,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/reflection-ai-grc-engineer","json_url":"https://alion.io/job/reflection-ai-grc-engineer.json","meta":{"generated_at":"2026-10-12T09:23:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14229,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48184},"rest":"https://alion.io/mcp/rest/get_company?id=48184"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Freflection-ai-grc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Freflection-ai-grc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Freflection-ai-grc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/reflection-ai-grc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Freflection-ai-grc-engineer"}]}