# Security Engineer - GRC Frameworks & AI Governance at xAI

xAI is hiring a Security Engineer - GRC Frameworks & AI Governance in Palo Alto, New York and Washington DC, United States. It pays $100k-$198k a year and Level rates it Little AI ●○○○; you can [apply on xAI](https://jobsbylevel.com/go/4b10d281-a741-4354-b7ed-b1521ae04402?utm_medium=ai-agent).

AI Level 1, AI centrality 28 out of 100.  Palo Alto, CA; New York, NY; Washington, DC.

## Details

- Company: [xAI](https://jobsbylevel.com/companies/xai)
- AI level: AI Level 1 (score 28 out of 100)
- Location:  Palo Alto, CA; New York, NY; Washington, DC
- Salary: $100k-$198k
- Posted: January 13, 2026
- Apply: https://jobsbylevel.com/go/4b10d281-a741-4354-b7ed-b1521ae04402?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=security-engineer-grc-frameworks-ai-governance-at-xai-5359b4

## Description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today, SpaceX is actively developing the technologies to make this possible, with the ultimate goal of making life multiplanetary and expanding consciousness to the stars. SpaceXSI is building Super Intelligence to help humanity understand the universe. Our teams are building the full Super Intelligence stack: from our Colossus supercomputers, to Grok models, to our suite of applications, including Grok Bot, Grok Build, Grok Imagine, Grok Voice, and X. We're creating a powerful flywheel where more compute trains better models, better models power more useful products, and what we learn from people using those products shapes what we build next. ABOUT THE ROLE: We are seeking a mid-level Governance, Risk, and Compliance (GRC) Engineer to join our security and AI governance team at SpaceXSI. You will set the standards the organization builds to, design and implement controls, and automate the unglamorous parts of compliance so a fast-moving team can ship safely. The ideal candidate combines deep fluency across modern security and AI frameworks with GRC engineering skills: you translate control requirements into technical implementations, partner with engineers to bake compliance into architecture and CI/CD, and replace point-in-time checklist work with continuous, engineered assurance. You will collaborate across engineering, legal, product, and leadership to keep our AI systems audit-ready across enterprise, commercial, and public-sector environments. This role may also include additional tasks and responsibilities as needed to support the team and evolving business priorities. RESPONSIBILITIES: Execute security compliance implementation and audits across core frameworks including SOC 2, NIST CSF, NIST SP 800-53, ISO 27001, ISO 42001, and the EU AI Act, including control design, mapping, gap assessment, evidence collection, and remediation tracking. Build and maintain Compliance-as-Code and continuous compliance capabilities — policy-as-code, automated control validation, continuous evidence pipelines, and monitoring integrated into development and deployment workflows — so the company can move fast without cutting corners. Operate and extend GRC platforms (e.g., Vanta) as the system of record for controls, evidence, and audit readiness; integrate them with cloud, identity, and engineering tooling to reduce manual toil. Partner with engineering and architecture to embed compliance requirements early in design reviews; translate framework obligations into clear technical control narratives that satisfy auditors without slowing delivery. Develop, maintain, and continuously improve corporate policies, standards, and procedures that support the company's governance and AI management system posture. Identify, assess, and prioritize risks related to AI/ML operations, cybersecurity, regulatory compliance, data privacy, intellectual property, and cloud deployments; distinguish meaningful business risk from compliance theater. Lead risk assessments and compliance reviews for new products, model deployments, features, and architectural changes, with particular attention to AI system risks (data handling, model governance, agentic and conversational surfaces). Own and cultivate relationships with external auditors, assessors (e.g., QSAs where applicable), and regulators; serve as the bridge between auditors and internal teams so requests are reasonable, clear, and relevant to our stack. Champion a culture of security and compliance across the company — educating teams on why controls exist, not only enforcing them. BASIC QUALIFICATIONS: Bachelor's degree in computer science, Information Security, Cybersecurity, or in an engineering/STEM field. 3+ years of experience in GRC, security compliance, or technology audit roles with hands-on GRC engineering responsibilities. Demonstrated experience

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/security-engineer-grc-frameworks-ai-governance-at-xai-5359b4

Source: https://jobsbylevel.com/jobs/security-engineer-grc-frameworks-ai-governance-at-xai-5359b4

## Cite this page

Level. https://jobsbylevel.com/jobs/security-engineer-grc-frameworks-ai-governance-at-xai-5359b4.

Get job alerts: https://jobsbylevel.com/newsletter