Senior Compliance Automation Engineer

Muck Rack is the leading SaaS platform for public relations and communications professionals. Our mission is to enable organizations to build trust, tell their stories, and demonstrate the unique value of earned media. Muck Rack’s AI-powered, comprehensive, and integrated platform streamlines the PR workflow to help businesses generate positive media coverage, monitor mentions to manage brand reputation, and analyze PR’s impact on business outcomes. By combining media database, monitoring, and reporting into one dynamic platform, we empower teams to collaborate seamlessly, pitch effectively, and analyze results faster and more efficiently.

Founder-controlled, fully distributed, and growing sustainably, Muck Rack has received several awards for its unparalleled culture and product from organizations like Inc., Quartz, G2, and BuiltIn. We value resilience, transparency, ownership, and customer devotion, and infuse these values into everything we do. 

We’re looking for a proactive and talented Senior Compliance Automation Engineer to join our team and help us on audit readiness and automating evidence collection design and develop automation solutions for our Governance, Risk and Compliance team.

As our Senior Compliance Automation Engineer, your mission will be to own common GRC toolsets, platforms, and processes, including automation and integration of these tools. This is a great opportunity for someone who is excited about Data Privacy, Security and AI, and wants to have an impact across multiple departments and take ownership of the projects and scope that they work in.

What you’ll do:

• Design and develop automation solutions for evidence collection across infrastructure, endpoints, and SaaS platforms (e.g., AWS, GCP, GitHub, Okta)
• Build and maintain scripts and APIs to interface with compliance tooling
• Support recurring internal and external audits (SOC 2, ISO 27001, GDPR, etc.) by ensuring automated and reliable control monitoring
• Work with the compliance team to define technical control requirements and translate them into measurable, testable systems
• Partner closely with our Legal team to audit and ensure compliance with regulatory and contractual requirements
• Work with Engineering partners to cooperatively solve technical compliance and privacy issues through new controls or coding
• Work to automate data governance processes
• Create and maintain GRC reporting dashboards, metrics, and KPIs

How success will be measured in this role:

• Successful completion of 3rd party audits
• Remediation, directly or through partnering with other teams, of potential or realized compliance issues
• Technical SME in Muck Rack for GRC and Data Privacy tooling

If the details below describe you, you could be a great fit for this role:

• 5+ years of professional experience, including 3+ years in Governance, Risk and Compliance
• Proficiency in writing scripts and coding to automate audit and evidence gathering processes, leveraging Python and SQL
• Experience with Security and Compliance frameworks (SOC 2, ISO 27001, GDPR, etc.)
• Experience owning a project or scope, researching the problems, partnering with relevant stakeholders and driving it to completion
• Experience consuming and building RESTful APIs to integrate various security, IT, and GRC tools
• Experience in building productive relationships and driving collaboration with both technical and non-technical teams

Interview Overview

Here’s what you can expect from our process. We’ll keep you informed at every step and let you know if anything changes along the way.

• Intro call with a member of our Talent Team
• A video interview with the Hiring Manager
• Peer interviews with future teammates
• Final call(s) with executive team member(s) 

Salary

In the US, the base salary for this role is between $130,000-145,000, depending on skills and experience. Total compensation for this role consists of base salary, quarterly bonus plan, and equity.

We take a geo-neutral approach to compensation within the US, meaning that we pay based on job function and level, not location. For all other countries, we have competitive pay bands based on market standards.

Individual compensation decisions are based on a number of factors, including experience level, skillset, and balancing internal equity relative to peers at the company. We expect the majority of the candidates who are offered roles at our company to fall healthily throughout the range based on these factors. We recognize that the person we hire may be less experienced (or more senior) than this job description as posted. If that ends up being the case, the updated salary range will be communicated with you as