Security Engineer, GRC

The job

LIVE Employer public job feed (private-sector employer) Source: the employer's public careers feed · Data: listed 2026-07-16

Job description

We believe that the way people interact with their finances will drastically improve in the next few years. We’re dedicated to empowering this transformation by building the tools and experiences that thousands of developers use to create their own products. Plaid powers the tools millions of people rely on to live a healthier financial life. We work with thousands of companies like Venmo, SoFi, several of the Fortune 500, and many of the largest banks to make it easy for people to connect their financial accounts to the apps and services they want to use. Plaid’s network covers 12,000 financial institutions across the US, Canada, UK and Europe. Founded in 2013, the company is headquartered in San Francisco with offices in New York, Seattle, Washington D.C., Raleigh, London, and Amsterdam.

The Security Governance, Risk, and Compliance (GRC) team is part of Plaid’s security organization, focused on enabling the business by proactively managing information security risks and maintaining effective controls. Our mission is to reduce the likelihood and impact of security risks while operating a robust assurance program that builds trust with our customers, consumers, and data partners. We own Plaid’s security compliance frameworks, run our audits and risk programs, and partner across the company to keep Plaid’s platform secure, resilient, and aligned with industry and regulatory expectations. GRC Engineering is how we make all of that scale — turning compliance into code, evidence into telemetry, and audits into a continuous, automated capability.

The Role:

• You will own GRC Engineering at Plaid — a foundational, high-ownership role defining an emerging discipline from the ground up. Today most of our compliance work is manual and point-in-time; you will turn it into an engineered system that is continuous, data-driven, and scalable, and set the technical direction for the field.

• You will:

  • Define the discipline and the architecture — how GRC Engineering works at Plaid, not just execute within it.

  • Build the foundation the function runs on — a codified source of truth for controls, policies, and evidence, fed by live pipelines and continuous controls monitoring.

  • Be the engineering backbone for Security Assurance & Trust Enablement, Third-Party Ecosystem Risk, and Risk Management

  • Make risk visible and data-driven — turning control and risk data into real-time signals for the team and leadership.

  • Pioneer where compliance is heading — compliance-agents-as-code in the SDLC, AI- and agent-driven workflows, and machine-readable continuous compliance (FedRAMP 20x).

• This role is perfect for you if:

  • You think in systems: you'd rather design the thing that eliminates a whole class of manual work than automate one task at a time.

  • You love building and shipping internal tools and solutions that people actually use.

  • You're relentlessly curious — you poke, you investigate, and you dig into how controls can silently fail, drift, or get bypassed so you can catch it automatically.

  • You treat every roadblock as just an obstacle to route around — you don't back down, because there's always a path.

  • You like range — juggling several problems across security, risk, compliance, and engineering beats grinding on a single one.

  • You're energized by turning compliance from a documentation exercise into demonstrable, continuous, machine-readable evidence.

Responsibilities:

• Architect GRC's Engineering Foundation: Build the pipelines and codified source of truth the function runs on — controls, policies, and framework mappings captured as structured, version-controlled data and fed by live control and system state — so one control maps evidence across SOC 2, ISO, NIST, and beyond instead of being re-collected for every audit.

• Build Continuous Controls Monitoring: Automate evidence collection, control testing, and monitoring across cloud and internal systems, and write and tune the detection that flags drift and misconfiguration against baseline — so audit readiness is continuous and gaps surface the moment they appear, not at audit time.

• Turn Data into Risk Signal: Build dashboards and SQL-driven reporting that turn raw control and risk data into KPIs, giving the team and leadership real-time visibility into risk posture.

• Drive Data-Informed Risk Assessments: Conduct security and technology risk assessments and recommend mitigations using data — keeping the risk management program running while cutting its manual overhead.

• Automate Operational Toil: Eliminate the recurring manual work the team carries — evidence pulls, access and vendor reviews, questionnaires, risk-register upkeep, status reporting — with durable automation that gives time back across every workstream.

• Shift Compliance Left with Code and AI: Embed compliance checks into the CI/CD flow as policy-as-code so controls are validated as code ships, prototype self-healing policies reconciled against live infrastructure, and scale agentic / AI-assisted workflows across the function.

• Future-proof for Continuous Compliance: Build toward machine-readable, continuously validated evidence (FedRAMP 20x-style Key Security Indicators), positioning Plaid to meet continuous-compliance expectations as we enter new markets and pursue new authorizations.

Qualifications:

• Software & Data Engineering Foundations:

  • Strong Python and SQL, with a proven track record of building API/webhook integrations that connect disparate systems.

  • Experience owning an internal tool or service end to end — design, build, operate, and maintain — with real users depending on it.

  • Hands-on experience with AWS and cloud-native security controls, including the ability to query cloud, GitHub, and SaaS logs.

  • Proficiency with dashboarding / data-visualization tools (e.g., Mode) to turn control and risk data into KPIs and signal.

• Applied GRC Engineering:

  • Experience building and operating continuous controls monitoring end to end — collecting signal from live systems, writing and tuning the detection logic that compares state to a baseline, alerting, and driving remediation.

  • Demonstrated ability to model controls, policies, and framework mappings as structured, version-controlled data rather than docs and spreadsheets.

  • Hands-on experience with IaC (Terraform) and policy-as-code (OPA/Rego, Sentinel), including embedding compliance checks into CI/CD.

  • Proven ability to eliminate recurring operational toil — evidence pulls, access and vendor reviews, questionnaires, risk-register upkeep, status reports — with durable automation rather than one-off scripts.

• Compliance & risk knowledge:

  • Working knowledge of SOC 2, ISO 27001/27701, and NIST CSF/800-53, with the ability to map controls to evidence and crosswalk a single control across frameworks.

  • Experience conducting security or technology risk assessments and translating findings into data-driven mitigation.

  • Familiarity with the shift to continuous compliance (FedRAMP 20x, machine-readable Key Security Indicators) and how it changes evidence and control design.

• AI fluency & tooling:

  • Demonstrated ability to build and scale agentic / AI-assisted workflows (Claude, OpenAI) as leverage for the whole team.

• Cross-functional effectiveness:

  • Ability to work independently and cross-functionally across security, infrastructure, and engineering, with strong prioritization and the ability to influence without authority.

Nice to have:

• Direct experience with FedRAMP or FedRAMP 20x, or other public-sector / continuous-compliance authorizations.

• Experience with audit ›/ compliance automation platforms (Anecdotes, Drata, Vanta, Paramify, or similar).

• Exposure to security incident response and triage.

• Experience in a high-growth fintech or financial-services environment.

• Degree in Computer Science, Cybersecurity, or a related field.

Our mission at Plaid is to unlock financial freedom for everyone. To support that mission, we seek to build a diverse team of driven individuals who care deeply about making the financial ecosystem more equitable. We recognize that strong qualifications can come from both prior work experiences and lived experiences. We encourage you to apply to a role even if your experience doesn't fully match the job description. We are always looking for team members that will bring something unique to Plaid!

Plaid is proud to be an equal opportunity employer and values diversity at our company. We do not discriminate based on race, color, national origin, ethnicity, religion or religious belief, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, military or veteran status, disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state, and local laws. Plaid is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance with your application or interviews due to a disability, please let us know at accommodations@plaid.com.

Please review our Candidate Privacy Notice here.

Additional compensation in the form(s) of equity and/or commission are dependent on the position offered. Plaid provides a comprehensive benefit plan, including medical, dental, vision, and 401(k). Pay is based on factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience and skillset, and location. Pay and benefits are subject to change at any time, consistent with the terms of any applicable compensation or benefit plans.

Explore around this job

Field: Technology Sub-niche: Cybersecurity All jobs at Plaid Inc. Jobs in Pennsylvania Jobs in Philadephia, PA Pennsylvania state guide

View this job and apply on the employer's page →

You apply on the employer's page; AtiveSite does not receive or process applications and is not affiliated with the employer. The description above is shown as the source published it.

About the role

This is a — role in the Technology field (Cybersecurity) at Plaid Inc..

We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.

How to prepare and behave

This is editorial guidance, not information from the employer.

• Read the whole description and match your examples to its requirements; use the same words the posting uses where they are true for you.
• Research the employer before the interview: what it does, who its customers are and recent news; prepare two or three questions about the work.
• Arrive early (or log in early for a video call), dress one step above the daily dress code, and test your camera and audio beforehand.
• Answer with short stories: the situation, what you did and the result. Give numbers when you have them and never invent them.
• Be honest about gaps; say what you did to learn and how fast you can close them.
• Ask about the team, the first 90 days, how success is measured and the schedule; do not open with salary and time off.
• When pay comes up, know the market range for the occupation and your lowest acceptable offer before you answer; ask for the full package in writing.
• Send a short thank-you message within a day, mentioning one thing you discussed.
• The listing mentions a remote or flexible location. Confirm with the employer whether remote work applies to your state: taxes, licensing and benefits can depend on where you live.
• Have code, data work or projects you can show, and be ready to think aloud: many technical interviews test how you reason, not only the answer.

Know your rights as a candidate and an employee:

• U.S. Equal Employment Opportunity Commission: prohibited employment practices
• U.S. Department of Labor: Wage and Hour Division
• CareerOneStop (U.S. Department of Labor): job search help, interview tips and resumes
• USA.gov: avoiding job scams

The city

Philadephia, PA is not one of the cities with its own page in our guides, so here is the state: Pennsylvania.

The state economy in brief

Pennsylvania is in the Northeast region (Middle Atlantic division) and has 13,018,639 residents (the 5th largest of the 50 states and DC by population), with a median age of 40.9. Its economy produced about $1,083,169 million in the latest four quarters (BEA), 6th among states and DC, equal to $83,201 per resident.

Jobs and the labour market

The unemployment rate was 3.6% in 2026M09, which is 22nd lowest of 51 (1st is the lowest). Employers had job openings equal to 3.7% of employment, 34th highest of 51, a measure of how hard it is to hire. The median wage across all occupations is $49,690 a year ($23.89 an hour), about the same as the national median ($49,690 against $50,980).

What people do and what it pays

The occupations with the most jobs in Pennsylvania are Home Health and Personal Care Aides (257,370 jobs, median $29,420); General and Operations Managers (172,010 jobs, median $103,130); Registered Nurses (146,520 jobs, median $96,430); Fast Food and Counter Workers (142,220 jobs, median $28,570); Retail Salespersons (141,790 jobs, median $31,200). Among occupations with at least 2,000 jobs, the best paid are Family Medicine Physicians (median $306,030); Chief Executives (median $232,560); Nurse Anesthetists (median $221,530). Compared with the nation, the state is most specialised in healthcare support (1.3 times the national share of workers) and community and social service (1.2 times the national share of workers).

Cost of living, taxes and workplace rules

Prices are below the national average in Pennsylvania: the regional price parity is 97.6 against 100 for the whole country (28th lowest of 51). Median gross rent is $1,209 a month and the median household income $77,971, so a year of rent equals 18.6% of income; the median home value is $254,500. The state minimum wage is $7.25 (the higher of state and federal rates applies to most workers). State income tax on wages: Flat 3.07%. It is not a right-to-work state, so union contracts can require fees from covered workers. It has no state paid family and medical leave programme in our source.

People and commuting

7.7% of residents were born abroad and 35.2% of adults hold a bachelor's degree or higher. Among workers, 68.2% drive alone, 3.6% use public transit and 15.6% work from home; 16.4% commute 45 minutes or more.

State guide: Pennsylvania →

Where to live

The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.

Career paths

We could not match this title to one occupation, so here are the other sub-niches in Technology, where your skills may carry over:

Data, analytics and AI (2461) Software engineering (2678) Cloud, IT and infrastructure (743) Product management (570)

Distances

This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Technology jobs with distances from any of the 20 largest cities.

The employer

Plaid Inc. is the employer in this listing. See all its open jobs here →

We do not hold headcount or revenue for this employer. Check its careers site and, if it is listed on a stock exchange, its public filings (SEC EDGAR search).

What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".

Other open jobs at Plaid Inc.

Similar jobs

Same sub-niche: Cybersecurity

All Cybersecurity jobs → · All Technology sub-niches →

FAQ

What is the Security Engineer, GRC job at Plaid Inc.?

A private-sector role in technology (cybersecurity) listed 116 days ago. The full description is on this page and on the employer's page.

Where is this job?

Philadephia, PA. A remote or flexible location is listed; confirm with the employer which states are accepted.

How do I apply?

Use the "View this job and apply on the employer's page" button. AtiveSite does not receive applications.

How much does it pay?

The listing does not publish pay, and we could not match the title to one official occupation.

What is the cost of living there?

See the state or country guide for rent, income and taxes.

How old is this listing?

It was posted on 2026-07-16 (116 days ago). Jobs older than 90 days are not shown.

Are there similar jobs?

Yes: browse cybersecurity jobs in Pennsylvania.

Sources and terms

• Job data: Plaid Inc. careers page public feed (listing dated 2026-07-16). The job disappears from this site when it disappears from the source.
• Wages and projections: BLS OEWS (May 2025) and Employment Projections 2025–35.
• City and county figures: Census Bureau ACS 2020–2024, BEA, BLS QCEW and LAUS, NASA POWER climatology; distances from Census Gazetteer coordinates.

AtiveSite is not affiliated with or endorsed by the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.

Sources

• BLS OEWS (wages and employment by occupation, May 2025)
• BLS Employment Projections 2025–35
• BLS Local Area Unemployment Statistics
• BLS JOLTS
• BLS State and Metro Area Employment
• Census Bureau American Community Survey (via Census Reporter)
• BEA GDP by state and Regional Price Parities
• IRS 2026 tax adjustments
• U.S. Department of Labor, minimum wage by state
• Tax Foundation state income tax rates 2026
• USAJOBS
• USCIS
• U.S. Department of State, visas
• NASA POWER climatology
• GeoNames / Census Gazetteer (coordinates)