Level

Applied Intuition

GRC Engineer

Applied Intuition is hiring a GRC Engineer in Sunnyvale, United States. It pays $160k-$190k a year and Level rates it ; you can apply on Applied Intuition.

Level's read on this job

  • Level rates this role Little AI ●○○○: aI is not part of the work.
  • The posting mentions Vanta, Drata and Onetrust among its tools and skills.
  • Level classes it as a mid-level role.
  • Applied Intuition has 327 other open roles on Level.

AI in this role

Manage GRC operations, compliance frameworks, risk assessments, and automated control monitoring for physical AI systems.

vantadrataonetrustanecdotes
ai-agentsgrcrisk-assessmentcompliancevendor-risk-management

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co.

We are an in-office company, and our expectation is that full-time employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. This in-office expectation does not apply to contractor positions

At Applied Intuition, you will:

  • Own day-to-day GRC operations - including (but not limited to) performing risk assessments, driving continuous compliance programs, automating control monitoring and evidence collection, and completing third party security reviews

  • Perform and improve security risk assessments, maintain the risk register, partner with risk owners to drive risk remediation and mitigation

  • Own the third-party risk management lifecycle, including vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation. Improve the efficiency and consistency of vendor assessments through standardized workflows, automation, and risk-based review processes

  • Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness and work with control owners towards continuously strengthening security posture

  • Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and scalability

  • Deep hands-on experience with major security and privacy frameworks such as ISO42001, NIST AI RMF, ISO27001/17/18, TISAX, SOC 2 or NIST CSF

  • Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements to practical controls, assessments, and evidence

  • Maintain and update security policies and standards aligned with industry best practices

 

We're looking for someone who has:

  • Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.

  • 5–8 years of experience in security GRC, risk management, or compliance program ownership.

  • Active security certification (e.g. CISSP, CISA, CISM, AIGP, ISO 27001 Lead Auditor)

  • Proven experience building scalable GRC automations using AI agents, custom tooling, or scripting.

  • Strong organizational skills and ability to manage multiple priorities under tight deadlines.

  • Strong written and verbal communication skills with technical execution rigor.

 

Nice to have:

  • Software engineering or technical background building automations for evidence collection, control validation, or audit workflows.

  • Experience defining security metrics/KPIs and executive reporting frameworks.

  • Experience completing customer security questionnaires and assurance reviews.

  • Exposure to automotive security and safety standards (e.g., ISO 21434, ISO 26262).

Compensation at Applied Intuition for eligible roles includes base salary, equity, and benefits. Base salary is a single component of the total compensation package, which may also include equity in the form of options and/or restricted stock units, comprehensive health, dental, vision, life and disability insurance coverage, 401k retirement benefits with employer match, learning and wellness stipends, and paid time off. Note that benefits are subject to change and may vary based on jurisdiction of employment.

Applied Intuition pay ranges reflect the minimum and maximum intended target base salary for new hire salaries for the position. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, interview performance, and the level and scope of the position.

Don’t meet every single requirement? If you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

Applied Intuition is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a) and 41 CFR 60-741.5(a) and that these laws are incorporated herein by reference. These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity or national origin. These regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability. The parties also agree that, as applicable, they will abide by the requirements of Executive Order 13496 (29 CFR Part 471, Appendix A to Subpart A), relating to the notice of employee rights under federal labor laws.

FOR US-BASED ROLES: Applied Intuition is committed to providing an accessible and inclusive application and interview experience to applicants who are disabled veterans and other applicants with disabilities or medical conditions. Reasonable accommodations are available, requesting an accommodation will not affect your candidacy in any way, and you are not required to disclose the nature of your disability or medical condition in order to make a request. If you require an accommodation please contact careers@applied.co. We will work with you!

How we rate this

GRC Engineer at Applied Intuition rates 20 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

  1. ●●●● Builds AI80 to 100
  2. ●●●○ Works on AI60 to 79
  3. ●●○○ Uses AI40 to 59
  4. ●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

AI agentsGrcRisk AssessmentComplianceVendor Risk ManagementVantaDrataOnetrust

Questions you could be asked

  1. How do you decide when an AI agent can act on its own versus asking for approval first?
  2. Tell me about a project where grc was part of your work. What did you do?
  3. Tell me about a project where risk assessment was part of your work. What did you do?
  4. Tell me about a project where compliance was part of your work. What did you do?
  5. Tell me about a project where vendor risk management was part of your work. What did you do?

Adapt your resume

  • List these exact terms on your resume: AI agents, Grc, Risk Assessment, Compliance, and Vendor Risk Management. An applicant tracking system matches the wording, not the idea.
  • Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get new software engineering jobs by email

One email a week with the new software engineering jobs, each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free. One email a week. Unsubscribe in one click.

Similar roles

Software Engineering roles that involve little AI, at other companies.

Target

Tower 02, Manyata Embassy Business Park, Racenahali & Nagawara Villages. Outer Ring Rd, Bangalore 5400653h ago

What kind of AI work fits you?

Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.

Find my next step

More jobs at Applied Intuition

Related searches

Same AI level

Jobs by city