Senior GRC Engineer - Remote

Overview

Magic is innovating at the intersection of crypto and AI to make wallets invisible and capable of running on autopilot. We are seeking a Senior GRC Engineer to transform our compliance and risk management capabilities through automation and engineering excellence.

In Short

• Build automation and integrations between GRC frameworks and security/engineering tools.
• Lead automation-driven control assessment, evidence collection, and reporting processes.
• Replace legacy GRC approaches with frameworks that avoid checkbox compliance.
• Design and implement compliance-as-code frameworks.
• Develop automated evidence collection and reporting systems.
• Define GRC best practices for web3 governance.
• Create APIs and integrations between GRC platforms and security tools.
• Coordinate and track security-related audits.
• Work closely with Infrastructure and Engineering teams.
• Support the evolution from traditional compliance to automated frameworks.

Requirements

• 5+ years of experience in GRC, compliance, or security engineering roles.
• Experience developing scripts in various scripting languages (Python, Go).
• Knowledge of regulations and controls (SOX, GDPR, ISO27001, NIST).
• Experience with GRC software tools (e.g., Drata, Vanta).
• Experience leading SOC 2, ISO 27001 audits.
• Understanding of infrastructure as code (Python CDK, Terraform).
• Previous experience in crypto/web3 environments is preferred.

Benefits

• Remote-first culture with flexible working hours.
• Stock options and token grants.
• 99% company-paid medical, dental and vision insurance.
• 100% company-paid life and disability insurance.
• 401(k) plan (US) or pension plan (CAN).
• $3,600 annual reimbursement for remote work and wellness.
• Flexible time off.
• Up to 12 weeks of paid parental leave.