Senior Risk & Governance Engineer

About AlphaSense: AlphaSense is the AI platform redefining market intelligence and workflow orchestration, trusted by thousands of leading organizations to drive faster, more confident decisions in business and finance. The platform combines domain-specific AI with a vast content universe of over 500 million premium business documents — including equity research, earnings calls, expert interviews, filings, news, and internal proprietary content. Purpose-built for speed, accuracy, and enterprise-grade security, AlphaSense helps teams extract critical insights, uncover market-moving trends, and automate complex workflows with high-quality outputs. With AI solutions like Generative Search, Generative Grid, and Deep Research, AlphaSense delivers the clarity and depth professionals need to navigate complexity and obtain accurate, real-time information quickly. For more information, visit www.alpha-sense.com . Come join us. About the Role AlphaSense's GRC function is making a deliberate investment in automation and engineering, and we need a Senior GRC Engineer to lead that charge. You will design and build the technical automation that powers our compliance testing, evidence collection, risk monitoring, and GRC platform integrations—and you will own the governance architecture for how AI and agentic systems are built and deployed at AlphaSense. You sit at the intersection of security engineering and compliance operations. You are not just AI-curious; you are AI-native in practice: you use LLMs and agents for real substantive work—analysis, drafting, automation, code, investigation—and you apply rigorous judgment about where AI creates leverage, where it introduces risk, and where a human must remain in the loop. The goal is continuous compliance infrastructure that generates its own proof, not a compliance team that sprints to collect evidence before each audit cycle.The conventional GRC playbook was not built for a company like AlphaSense—and we are not following it. We are building a GRC engineering function that we believe represents what the entire industry will eventually need to become: automated, AI-native, and architected like a product rather than operated like a process. The frameworks are still catching up. The tooling is still maturing. We are doing the work now that others will reference later. If you want to build something that sets the standard—not follow one—this is the role. Key Responsibilities Compliance Automation Engineering Design, build, and maintain automated compliance testing pipelines that continuously validate control adherence across cloud infrastructure, SaaS platforms, and internal systems. Replace point-in-time manual evidence collection with always-on automated checks. Pull evidence directly from APIs—cloud audit logs, identity systems, configuration posture, secrets management—without relying on screenshots or control owner self-attestation. GRC Platform Engineering & Integration Own the technical configuration and integration of the GRC platform (Drata or equivalent). Build custom API integrations, automated evidence connectors, and workflow automation that reduce manual control owner burden and keep evidence artifacts current. Know where the platform solves the problem and where custom code is the better answer. AI-Native GRC Workflows Develop and deploy AI-assisted workflows for evidence summarization, control narrative drafting, risk analysis, vendor questionnaire triage, and policy gap detection. Build with LLMs and agentic frameworks as a professional standard—not an experiment. Apply domain-specific judgment: know where AI helps, where it hurts, and where sensitive data, attacker-controlled inputs, or privileged access require a human in the loop. AI & Agentic Systems Governance Own