Senior Risk & Governance Engineer

About this job

AlphaSense delivers trusted market intelligence and search built on proven AI, helping sophisticated global enterprises remove uncertainty from decision-making. The company is seeking a Senior Risk & Governance Engineer to join the GRC function in Pune. In this role, you will lead investments in automation and engineering to replace traditional manual compliance processes with continuous, AI-native infrastructure. A normal day involves designing automated compliance testing pipelines, integrating GRC platforms via APIs, developing AI-assisted workflows for risk analysis and evidence summarization, and establishing governance architectures for AI and agentic systems. You will collaborate closely with engineering and legal teams to build policy-as-code and ensure real-time observability over security controls, helping AlphaSense set the industry standard for automated compliance.

Responsibilities

• Design and build automated compliance testing pipelines to continuously validate control adherence across cloud and SaaS systems.
• Own the technical configuration and custom API integrations for the GRC platform to automate evidence collection.
• Develop AI-assisted workflows using LLMs and agentic frameworks for risk analysis, policy gap detection, and evidence summarization.
• Define governance frameworks, policies, and control sets for AlphaSense's AI and agentic systems.
• Build the policy program as code using version control with rules expressed as enforceable automated checks.
• Instrument controls with observability tooling to provide real-time signals on control health and risk posture.
• Integrate GRC tooling with the broader security stack including SIEM, EDR, CSPM, and identity platforms.

Requirements

• 6+ years of experience in GRC, information security, risk management, or IT audit.
• Experience working in a SaaS environment.
• Strong background in security engineering and compliance operations.
• Practical experience using LLMs and AI agents for substantive technical tasks.
• Familiarity with compliance frameworks such as SOC 2, ISO 27001, and ISO 42001.

Who should apply

This role suits experienced professionals with a strong background in information security, risk management, or GRC who want to move beyond conventional compliance playbooks. If you are an AI-native practitioner who enjoys building automated compliance infrastructure and designing governance architectures for AI systems, this position in Pune is ideal for you. Freshers should not apply, as the role requires 6+ years of relevant experience.

Frequently asked questions