Job Overview
Location
US Remote
Job Type
Full-time
Category
Software Engineering
Date Posted
July 9, 2026
Full Job Description
📋 Description
- • ButterflyMX is seeking a GRC Engineer who is equal parts practitioner and builder to own the governance, risk, and compliance program.
- • The role spans the full GRC surface: compliance operations, risk management, audit management, trust and assurance, vendor/supply chain risk, and operational privacy support.
- • The GRC Engineer will design a risk management workflow that uses AI tooling to surface, score, and route emerging risks with minimal manual intervention.
- • Lead external audit management (SOC 2 Type II) and automate evidence collection pipelines in Vanta.
- • Engineer the Trust and Assurance program for scale: build automated intake and triage workflows for security questionnaire requests.
- • Build a vendor and supply chain risk program that goes beyond static spreadsheets.
- • Redesign and maintain security and privacy policies using AI to draft, version, and track policy updates.
- • Own common controls monitoring in Vanta and drive the organization toward an always-on compliance posture.
- • Modernize the security awareness and training program.
- • Design and operationalize an integrated compliance calendar covering SOC 2, security and IT systems licensing renewals, applicable state privacy regulations, and any other active frameworks.
- • Support the CISO and General Counsel on operational privacy practices.
- • Monitor the regulatory and compliance landscape, including AI governance developments.
- • Leverage AI tools across every GRC workflow to demonstrate measurable efficiency gains through automation and tooling.
🎯 Requirements
- • 3+ years of experience in GRC, information security compliance, or risk management.
- • Working knowledge of SOC 2 (Trust Services Criteria), with hands-on experience supporting or leading audits.
- • Familiarity with additional frameworks is a strong plus.
- • Experience conducting rapid third-party/vendor risk assessments and managing a supply chain risk program.
- • Strong organizational skills with the ability to manage multiple concurrent workstreams and deadlines.
- • Excellent written communication, capable of drafting clear, audience-appropriate policy documents and executive risk summaries.
- • Experience with Vanta platform (or equivalent).
- • Relevant certifications a plus: CISA, CRISC, CISSP, CIPP, or equivalent.
- • Proven experience with leveraging AI tools in both professional and personal settings.
🏖️ Benefits
- • Comprehensive Medical, Dental and Vision plans (ButterflyMX covers 80% of the cost) starting day 1.
- • 401(k) plan with a match.
- • 10 paid holidays, 20 vacation days, 5 sick days, 3 floating holidays.
- • Basic Life and Accidental Death and Dismemberment Insurance (ButterflyMX covers 100% of the cost).
- • Short and Long Term Disability (ButterflyMX covers 100% of the cost).
- • Paid Family Leave.
- • Employee Assistance Program.
- • Quarterly self-care stipends.
- • Access to optional benefits including pre-tax flexible healthcare spending accounts (FSA and HSA), Dependent Care FSA, and Commuter Benefits, as well as optional Supplemental Life, AD&D, Hospital Indemnity, Legal, Accident, Critical Illness, Pet, and Personal Liability Insurance.
Skills & Technologies
See exactly how your profile matches this role — strengths, skill gaps, and what to do about them.
About ButterflyMX Inc.
ButterflyMX Inc. provides cloud-based access control and intercom systems for multifamily, commercial, and student housing properties. Its platform replaces legacy intercoms with smartphone-based entry, supports video calling, delivery PINs, and integrations with property management software. Founded in 2014, the company serves over 10,000 properties across North America.
Subscribe to the weekly newsletter for similar remote roles and curated hiring updates.
Newsletter
Weekly remote jobs and featured talent.
No spam. Only curated remote roles and product updates. You can unsubscribe anytime.
Similar Opportunities
Atomic Financial Inc.
2 months ago
PermitFlow Inc.
2 months ago
ElevenLabs Inc.
2 months ago
Imprint Technologies Inc.
1 month ago