Senior Software Engineer, GRC

Team Description

The Privacy and Compliance Engineering team is responsible for preparing Reddit’s platforms for evolving regulatory requirements. We’re building products that establish the foundation of trust in the Reddit platform, while partnering closely with teams across the company to ensure our platforms and features meet the highest standards. Engineers on this team will thrive in dynamic, ambiguous problem spaces and work across multiple domains and technology stacks.

Role Description

We’re hiring a GRC Software Engineer to build and improve the software that supports Reddit’s security and compliance programs. You will design, implement, and maintain integrations, data pipelines, scheduled workflows, and automated checks across cloud, identity, HR, finance, code, and ticketing systems. Working closely with engineering and business partners, you’ll translate requirements into reliable tools that surface issues early and reduce manual work. You’ll own projects from discovery through launch, make clear technical trade-offs, and establish sustainable support with engineering partners.

How You’ll Have Impact:

This role will make Reddit’s compliance programs more effective and scalable by building systems that help teams address requirements early and automate recurring assurance work. You’ll work with engineers and control owners to define clear requirements, deliver practical solutions, and follow through after launch. Your work will improve how controls operate, make evidence more timely and reliable, and surface gaps sooner. Success means dependable systems that teams continue to use, less manual work, faster remediation, and clearer visibility into risk.

What You’ll Do:

• Own software projects from discovery through launch: work with partners to define the problem, agree on success measures, make technical trade-offs clear, deliver the solution, and follow through on results.
• Lead efforts to automate evidence collection across key systems in scope for SOX and other compliance requirements. Work with control owners and system teams to define evidence requirements, build and validate integrations, monitor failures, and establish ongoing support.
• Build and maintain integrations and scheduled workflows across cloud, identity, HR, finance, ticketing, version control, CI/CD, and GRC systems.
• Use APIs, scripts, queries, and orchestration tools to collect, normalize, validate, and retain data from authoritative systems. Own authentication, data modeling, testing, monitoring, failure recovery, documentation, and maintenance.
• Design data models that connect risks, controls, assets, owners, systems, and evidence across sources with different schemas, identifiers, permissions, and data quality.
• Build automated checks that detect missing, stale, inconsistent, or out-of-policy data, and route actionable failures to the right owners.
• Turn control requirements and audit requests into data specifications, testable checks, and exception logic. Partner with control owners to validate system scope and resolve gaps.
• Build strong working relationships across Security, Engineering, Infrastructure, Product, Privacy, Legal, and Finance. Learn how their systems operate and deliver tools, monitoring, and runbooks they can rely on after launch.

Role Requirements:

• 7+ years of experience in security, compliance, automation, data integration, security engineering, or a related technical field.
• Hands-on proficiency with Python, Go, or a comparable language and SQL, including writing, testing, reviewing, and maintaining code used by other people or operational workflows.
• Experience building API-based integrations using REST APIs, webhooks or polling, authentication flows, pagination, rate limits, error handling, and structured data formats.
• Experience building scheduled data workflows with an orchestrator such as Airflow and moving validated data between enterprise SaaS systems, databases, and cloud object storage.
• Technical fluency with a major cloud platform and its identity, storage, logging, monitoring, and secrets-management services; GCP experience is helpful but not required.
• Experience with version control, automated testing, code review, CI/CD, observability, secure credential handling, failure recovery, and the runbooks needed to support an integration after launch.
• Practical knowledge of security and compliance controls, including how requirements translate into system design, evidence, testing, and remediation. Experience applying one or more relevant frameworks or regulatory requirements, such as SOC 2, ISO 27001, SOX ITGC, NIST CSF, EU DSA, or EU NIS 2.
• Demonstrated ability to earn trust and influence without authority by listening carefully, making risk and technical trade-offs clear, reducing partner burden where possible, addressing concerns directly, and following through on commitments. You can independently own complex projects from discovery through launch and measurable results.

Benefits:

• Comprehensive Healthcare Benefits and Income Replacement Programs
• 401k with Employer Match
• Global Benefit programs that fit your lifestyle, from workspace to professional development to caregiving support
• Family Planning Support
• Gender-Affirming Care
• Mental Health & Coaching Benefits
• Flexible Vacation & Paid Volunteer Time Off
• Generous Paid Parental Leave

Pay Transparency:

This job posting may span more than one career level.

In addition to base salary, this job is eligible to receive equity in the form of restricted stock units, and depending on the position offered, it may also be eligible to receive a commission. Additionally, Reddit offers a wide range of benefits to U.S.-based employees, including medical, dental, and vision insurance, 401(k) program with employer match, generous time off for vacation, and parental leave. To learn more, please visit https://www.redditinc.com/careers/.

To provide greater transparency to candidates, we share base salary ranges for all US-based job postings regardless of state. We set standard base pay ranges for all roles based on function, level, and country location, benchmarked against similar stage growth companies. Final offer amounts are determined by multiple factors including, skills, depth of work experience and relevant licenses/credentials, and may vary from the amounts listed below.

In select roles and locations, the interviews will be recorded, transcribed and summarized by artificial intelligence (AI). You will have the opportunity to opt out of recording, transcription and summarization prior to any scheduled interviews.

During the interview, we will collect the following categories of personal information: Identifiers, Professional and Employment-Related Information, Sensory Information (audio/video recording), and any other categories of personal information you choose to share with us. We will use this information to evaluate your application for employment or an independent contractor role, as applicable. We will not sell your personal information or disclose it to any third party for their marketing purposes. We will delete any recording of your interview promptly after making a hiring decision. For more information about how we will handle your personal information, including our retention of it, please refer to our Candidate Privacy Policy for Potential Employees and Contractors.

Reddit is proud to be an equal opportunity employer, and is committed to building a workforce representative of the diverse communities we serve. Reddit is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If, due to a disability, you need an accommodation during the interview process, please let your recruiter know.