Turing’s mission is to accelerate superintelligence to drive real economic progress. Headquartered in San Francisco, Turing works with frontier AI labs to generate high-quality datasets, reinforcement learning environments, and frontier research benchmarks that improve model capabilities in software engineering, enterprise knowledge work, and advanced STEM reasoning. In software engineering, Turing is the largest and longest-running data provider in the category. Turing also works with Fortune 500 enterprises across financial services, life sciences, healthcare, retail, automotive, and CPG to build and deploy end-to-end agentic AI systems inside mission-critical workflows. By operating on both sides, Turing closes the loop between frontier research and enterprise deployment, turning real-world deployment signals into better data, evaluations, and more capable models. Learn more at www.turing.com.
We're looking for a Staff GRC Engineer to bring an engineering mindset to governance, risk, and compliance. This is a senior, hands-on role for someone who believes compliance shouldn't be a spreadsheet-and-screenshot exercise — it should be automated, continuous, and backed by real evidence pulled straight from systems. You'll build the tooling and pipelines that turn our control framework into code, collect evidence automatically, and give us continuous visibility into our compliance posture.
As a Staff engineer, you'll set the technical direction for how we do GRC at scale, partner with the compliance and risk teams to translate requirements into automation, and free up the organization from manual audit toil so it can focus on actual risk reduction.
What you'll do- Build and operate compliance automation: continuous controls monitoring, automated evidence collection, and control testing across cloud and corporate systems.
- Implement compliance-as-code and policy-as-code so controls are defined, versioned, tested, and enforced programmatically.
- Integrate GRC tooling with the systems that hold the evidence (cloud providers, IdP, ticketing, CI/CD, HRIS) via APIs.
- Build dashboards and reporting that give real-time visibility into control health, drift, and audit readiness.
- Reduce audit burden by automating the collection and packaging of evidence for SOC 2, ISO 27001, and other frameworks.
- Partner with GRC analysts and risk owners to translate control requirements into technical checks and remediation workflows.
- Automate access reviews, risk assessments, and vendor risk workflows.
- Set engineering standards for the GRC function and mentor analysts and engineers on automation.
- Significant experience (typically 8+ years) spanning security/GRC and software engineering, with a strong hands-on engineering background.
- Strong programming skills (Python, Go, or similar) and comfort building integrations against APIs.
- Working knowledge of compliance frameworks (SOC 2, ISO 27001, and similar) and what evidence and control testing actually require.
- Experience with cloud environments (AWS, GCP, or Azure) and infrastructure-as-code.
- Familiarity with GRC/compliance automation platforms and continuous controls monitoring concepts.
- Ability to lead cross-team initiatives and translate between compliance and engineering.
- Experience implementing compliance-as-code or building custom GRC tooling.
- Familiarity with policy-as-code (e.g., OPA) and drift detection.
- Prior experience surviving audits and knowing where the manual pain lives.
- Relevant certifications (CISA, CISSP, or similar).
At the Staff level, your impact reaches beyond the automation you personally write. You'll set the technical strategy for continuous compliance, identify where automation removes the most toil and risk, elevate the analysts and engineers around you, and make audit readiness a byproduct of how our systems already run.
Salary: $220k
- We are client first: We put our clients at the center of everything we do, because their success is the ultimate measure of our value.
- We work at Start-Up Speed: We move fast, stay agile and favor action because momentum is the foundation of perfection
- We are AI forward: We help our clients build the future of Al and implement it in our own roles and workflow to amplify productivity.
- Work at the frontier of AI, helping the world’s leading AI labs improve their most advanced models by building expert datasets, RL environments, and first-of-a-kind benchmarks.
- Contribute to leading-edge AI research and showcase your work at top conferences such as ICLR, ICML, and NeurIPS.
- Bring frontier AI innovation to the enterprise, applying lessons learned from leading AI labs to solve real-world business challenges.
- Collaborate with and learn from exceptional colleagues with deep AI experience from Google, Meta, Amazon, and other leading technology companies.
- Move at the pace of AI innovation, with the speed, ownership, and impact of a startup.
Turing is proud to be an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, gender identity, sexual orientation, age, marital status, disability, protected veteran status, or any other legally protected characteristics. At Turing we are dedicated to building a diverse, inclusive and authentic workplace and celebrate authenticity, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
For applicants from the European Union, please review Turing's GDPR notice here.
Skills Required
- Significant experience, typically 8+ years, spanning security or GRC and software engineering
- Strong hands-on software engineering background
- Strong programming skills in Python, Go, or similar languages
- Experience building integrations against APIs
- Working knowledge of SOC 2, ISO 27001, and similar compliance frameworks
- Understanding of compliance evidence and control testing
- Experience with AWS, GCP, or Azure cloud environments
- Experience with infrastructure as code
- Familiarity with GRC or compliance automation platforms
- Understanding of continuous controls monitoring concepts
- Ability to lead cross-team initiatives and translate between compliance and engineering
- Experience implementing compliance-as-code or building custom GRC tooling
- Familiarity with policy-as-code, such as OPA, and drift detection
- Prior experience managing audits
- Relevant certifications such as CISA or CISSP
Turing Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Turing and has not been reviewed or approved by Turing.
-
Fair & Transparent Compensation — Feedback suggests USD-denominated pay and access to higher-paying clients can outpace local benchmarks for many non‑U.S. developers. Payout timing and processing are described as predictable once engagements begin, which supports confidence in earnings.
-
Wellbeing & Lifestyle Benefits — Feedback suggests remote‑first work with flexible hours is a consistent positive that enhances day‑to‑day balance. The ability to work from anywhere and maintain autonomy is frequently highlighted as part of the overall rewards experience.
-
Healthcare Strength — Feedback suggests some U.S. corporate roles include comprehensive health benefits, with individual accounts referencing employer‑covered medical insurance. These signals indicate stronger healthcare support for certain employee populations.
Turing Insights
What We Do
We now live in a remote-first world and every company is in a race to find the best remote engineers. There are so many amazing engineers all over the world. Turing’s mission is to help unleash the world’s untapped human potential. More than 300 companies, including those backed by Google Ventures, Bloomberg, Andreessen, Founders Fund, and Kleiner are already using Turing to spin up their engineering dream teams. Turing’s hiring platform combines the planetary reach and AI to deliver your ideal engineers in order to help you spin up your engineering dream team. Our deep matching intelligence finds the best Turing developers across 100+ skills like React, Node, Python, Golang, Angular, Swift, Java, and many more. As part of our rigorous vetting process, we also review software engineers’ technical abilities, English skills, and remote working capabilities. Turing ensures time zone overlap, transparency, and reliable communication in order to make remote development easy for you after the match. The Turing team has deep expertise in AI and building engineering dream teams in the U.S. at top companies. Turing company is backed by well-known investors like Facebook’s initial CTO (Adam D’Angelo), executives from Google, Facebook, Amazon, Twitter, Founders Fund (investors in Facebook, Tesla, Asana, etc). Turing.com is led by serial A.I. entrepreneurs Jonathan Siddharth and Vijay Krishnan, their last A.I. firm leveraged remote talent and had a successful acquisition.
