Security GRC Engineer at Cursor designing and automating governance, risk, and compliance programs. Combines technical implementation of compliance workflows with strategic program development to build customer trust.
Our mission is to automate coding. The first step in our journey is to build the best tool for professional programmers, using a combination of inventive research, design, and engineering. Our organization is very flat, and our team is small and talent dense. We particularly like people who are truth-seeking, passionate, and creative. We enjoy spirited debate, crazy ideas, and shipping code.
About the role
Security GRC Engineers design, implement, and scale our governance, risk, and compliance (GRC) program. You will lead automation of compliance workflows, build self-serve tools to enable GTM teams, and ensure our products and infrastructure meet the highest security standards. This role combines technical implementation with strategic program development, directly shaping how we build trust with customers.
You may be a fit if
Experience with GRC frameworks (SOC 2, ISO 27001, ISO 27701, ISO/IEC 42001).
Hands-on technical skills to automate compliance workflows and integrate with engineering systems.
Proven ability to balance technical implementation with program strategy.
Strong cross-functional collaboration skills, especially with engineering, GTM, and auditors.
Sample projects include
Automate evidence gathering and continuous control testing.
Optimize compliance monitoring and alerting systems; provide guidance on remediation.
Generate security program KPIs and maintain a platform for documenting risks, controls, and assessments.
Build self-serve tools and automation to streamline customer security diligence.
Support GTM teams by providing scalable ways to address customer security concerns.
Maintain corporate security policies and map them to relevant frameworks.
Draft security best practices and drive company-wide awareness and training programs.
Lead the development and maturity of GRC strategies aligned with SOC 2, ISO 27001, ISO/IEC 42001, and related standards.
Partner with auditors, regulators, and business stakeholders to define and implement security requirements and controls.
Conduct security compliance reviews for new products, features, and vendors.