GRC Engineer

About the role

Applied Intuition, Inc. is powering the future of physical AI. Founded in 2017 and now valued at $15 billion, the Silicon Valley company is creating the digital infrastructure needed to bring intelligence to every moving machine on the planet. Applied Intuition services the automotive, defense, trucking, construction, mining and agriculture industries in three core areas: tools and infrastructure, operating systems, and autonomy. Eighteen of the top 20 global automakers, as well as the United States military and its allies, trust the company’s solutions to deliver physical intelligence. Applied Intuition is headquartered in Sunnyvale, California, with offices in Washington, D.C.; San Diego; Ft. Walton Beach, Florida; Ann Arbor, Michigan; London; Stuttgart; Munich; Stockholm; Bangalore; Seoul; and Tokyo. Learn more at applied.co http://applied.co.

We are an in-office company, and our expectation is that full-time employees primarily work from their Applied Intuition office 5 days a week. However, we also recognize the importance of flexibility and trust our employees to manage their schedules responsibly. This may include occasional remote work, starting the day with morning meetings from home before heading to the office, or leaving earlier when needed to accommodate family commitments. This in-office expectation does not apply to contractor positions

At Applied Intuition, you will:

- Own day-to-day GRC operations - including (but not limited to) performing risk assessments, driving continuous compliance programs, automating control monitoring and evidence collection, and completing third party security reviews

- Perform and improve security risk assessments, maintain the risk register, partner with risk owners to drive risk remediation and mitigation

- Own the third-party risk management lifecycle, including vendor intake, risk-based tiering, security assessments, due diligence, ongoing monitoring, and remediation. Improve the efficiency and consistency of vendor assessments through standardized workflows, automation, and risk-based review processes

- Establish automated control monitoring systems and continuous compliance workflows to maintain real-time audit readiness and work with control owners towards continuously strengthening security posture

- Administer GRC platforms (e.g., Vanta, Anecdotes, Drata, OneTrust) with a focus on automation and scalability

- Deep hands-on experience with major security and privacy frameworks such as ISO42001, NIST AI RMF, ISO27001/17/18, TISAX, SOC 2 or NIST CSF

- Support AI governance initiatives aligned with ISO 42001 and NIST AI RMF, translating requirements to practical controls, assessments, and evidence

- Maintain and update security policies and standards aligned with industry best practices

We're looking for someone who has:

- Bachelor’s or Master’s in Information Security, Computer Science, Engineering, or a related field.

- 5–8 years of experience in security GRC, risk management, or compliance program ownership.