Staff Security Engineer, GRC (Remote)

📋 Job Overview

ezCater is the #1 food tech platform for workplaces in the US. The company makes it easy for any organization to manage its food needs and order from over 125,000 restaurants nationwide. For workplaces, ezCater provides flexible and scalable solutions for everything from employee meal programs to one-off meetings, all backed by 24/7 service and business-grade reliability. For restaurant partners, ezCater helps grow their business by bringing them new high-value customers and large orders.

🏢 About ezCater

ezCater is looking for a Staff Security Engineer, GRC to join the Security Engineering & Compliance team as a technical leader who can help mature our governance, risk, compliance, and data security capabilities in a way that is durable, measurable, and embedded into how our systems operate day to day. This is not a narrow audit coordinator or policy only role. We're looking for a balanced builder-operator who can raise the quality and maturity of our security controls by expanding control monitoring, strengthening data security governance, automating and instrumenting the program where stronger evidence and better monitoring are needed, and improving the operational follow through that makes the program scalable, sustainable, and effective.

🎯 The Role

As a Staff Security Engineer, GRC, you will be responsible for leading control program maturity, building continuous control monitoring and automation, expanding data security policy and program quality, driving operational quality improvements, and leading through influence and systems thinking.

✅ Key Responsibilities

• Lead control program maturity by designing and maintaining an auditable control framework that fits ezCater's SaaS, cloud, data, and engineering environment
• Build continuous control monitoring and automation by identifying where quarterly or annual checks should become continuous or near-real-time monitoring
• Expand data security policy and program quality by helping define and mature data security policies, standards, and handling requirements
• Drive operational quality improvements by supporting day-to-day GRC and assurance work where hands-on execution is needed
• Lead through influence and systems thinking by owning a domain with high autonomy and improving the quality of systems, controls, and processes across that domain

📌 Required Qualifications

• 8+ experience in security GRC, compliance, risk, or security program work in a SaaS or cloud-native environment
• Strong experience with security compliance frameworks such as ISO-27001, NIST CSF, SOC 2, ITGC, and PCI-DSS
• Demonstrated ability to automate or instrument parts of a compliance or assurance program through scripting, APIs, dashboards, platform configuration, or other technical approaches
• Implementation of engineering system guardrails for ensuring compliance utilizing Policy-as-Code (Terraform) or secure configurations of platform systems within cloud hosted environments
• Experience building or improving data security governance, classification, handling rules, or related control practices across business systems, data platforms, or collaboration environments
• Familiarity with governing and securing AI/Agentic systems and business processing
• Strong written communication and cross-functional influence skills
• Able to collaborate closely with engineers and technical teams to design controls as code, configuration, workflow, or monitoring
• Strong systems thinker who can break ambiguous governance problems into workable operating models, measurable outcomes, and implementation steps
• Comfortable balancing strategic design work with operational execution
• Someone who improves process quality, identifies gaps between teams, and drives implementation of better ways of working
• Comfortable leveraging AI tooling and automated workflows to increase scale and velocity

⬆️ Desirable Experience

• Experience with scaling a unified control framework across multiple governance and compliance frameworks
• Experience with continuous control monitoring, policy-as-code, or GRC platforms and evidence tooling
• Familiarity with AI governance or emerging technology risk

🎁 Benefits

Market competitive salary, stock options, 12 paid holidays, flexible PTO, 401K with ezCater match, health/dental/FSA, long-term disability insurance, mental health and family planning resources, remote-hybrid work from our awesome Boston office OR your home OR a mixture of both home and office, a tremendous amount of responsibility and autonomy, wicked awesome co-workers, employee meal program (and many more goodies) when you're in our office.

🛂 Visa & Eligibility

ezCater does not sponsor applicants for work visas or legal permanent residence.