GRC Engineer

Role Overview:

• ButterflyMX is seeking a GRC Engineer who is equal parts practitioner and builder.
• You will own the governance, risk, and compliance program and re-engineer it using AI-assisted, automated workflows.
• This is a generalist role spanning the full GRC surface, reporting directly to the CISO.

Responsibilities:

• Own and continuously mature the company risk register with AI tooling.
• Lead external audit management and automate evidence collection in Vanta.
• Build vendor and supply chain risk program with automated intake and monitoring.

Requirements:

• 3+ years of experience in GRC, information security compliance, or risk management.
• Working knowledge of SOC 2 and hands-on audit experience.
• Experience with Vanta platform and leveraging AI tools in professional settings.