Greenhouse ·
contractGRC Engineer I
Brex · São Paulo, São Paulo, Brazil
Brex is an intelligent finance platform providing corporate cards, banking, and spend management software to global businesses. As a GRC Engineer I, you will join the Trust team to support the organization's governance, risk, and compliance initiatives. The role involves a blend of strategic planning and hands-on operational execution, focusing on maintaining security certifications, conducting vendor reviews, managing access controls, and performing inbound due diligence. You will work closely with cross-functional teams to interpret security requirements, assess the effectiveness of internal controls, and mitigate enterprise risks. A key part of the position includes developing automations to streamline compliance processes and improve the company's overall security posture. This role is well-suited for a candidate with a strong interest in security operations who is capable of balancing technical requirements with business objectives. You will gain exposure to complex security frameworks and regulatory landscapes while working in a hybrid environment based in the São Paulo office.
Why join us Brex is the intelligent finance platform that enables companies to spend smarter and move faster in more than 200 markets. By combining global corporate cards and banking with intuitive spend management, bill pay, and travel software, Brex enables founders and finance teams to accelerate operations, gain real-time visibility, and control spend effortlessly. Brex’s AI-native automation and world-class service eliminate manual expense and accounting tasks for customers so they can focus on what matters most. Tens of thousands of the world's best companies run on Brex, including DoorDash, Coinbase, Robinhood, Zoom, Plaid, Reddit, and SeatGeek. Working at Brex allows you to push your limits, challenge the status quo, and collaborate with some of the brightest minds in the industry. We’re committed to building a diverse team and inclusive culture and believe your potential should only be limited by how big you can dream. We make this a reality by empowering you with the tools, resources, and support you need to grow your career. Engineering at Brex Engineering at Brex is about building systems that scale with speed and intention. Our teams span Software, Data, Security, and IT, and operate with high autonomy and deep collaboration. We tackle hard technical problems, own our outcomes, and push for excellence at every level — from architecture to deployment. It's an environment where engineering is a craft, and builders become leaders. What you’ll do Building world-class financial services requires world-class security. As a GRC Engineer on the Trust team, you will work on high-impact cross-organization governance, risk, and compliance initiatives. You’d advocate for security across the company and scale Trust efforts while executing hands-on yourself. GRC’s mission is to instill trust in Brex from our customers, regulators, partners, and workforce in order to enable the company’s continued growth by maturing our security posture, maintaining compliance, optimizing security practices, and mitigating enterprise risk. We serve as the business side of Trust, and of Compliance as the what, Governance as the how, and Risk as the why, of Trust. Where you'll work This role will be based in our São Paulo office. We are a hybrid environment that combines the energy and connections of being in the office with the benefits and flexibility of working from home. We currently require a minimum of 3 days per week in the office - Monday, Wednesday and Thursday. As a perk, we also have up to four weeks per year of fully remote work. Responsibilities The GRC team handles a wide range of cross-functional activities from security compliance certifications and audits to risk management, vendor reviews, inbound due diligence, security education, access control, policy and procedures, and many more. Each of these ongoing parallel activities entails interpreting and setting requirements, assessing the effectiveness of security controls, risk-based decision making, cross-functional collaboration and communication, and staying up-to-date on security best practices and how changes in the evolving threat landscape need to inform our strategy. We always strive to go above and beyond industry standards in every aspect of GRC while keeping a balance with supporting the business’s goals. GRC is responsible for key programs that allow us to pass our audit requirements and underpin our risk management mandate. Each of these require strategic thinking and operational execution. As a GRC Engineer, you will get hands-on experience in the Trust field by developing your skills across numerous impactful operational tasks, in turn contributing to the strategy and evolving maturity of our Trust posture. Responsibilities Work under the guidance of seasoned GRC experts and gain exposure to a range of cross-functional programs and processes, both technical and business-centric. Enhance our GRC Engineering program, including building automations to improve compliance evidence collection, monitoring, and reporting dashboards. Conduct third party risk due diligence activities, namely identifying and assessing risks associated with existing and new vendor relationships prior to procurement and periodically thereafter, continuously monitoring for any relevant changes to the risk level or engagement scope. Where findings are identified during assessments, you would ensure plans of actions and check-ins are in place. Other Operational GRC Tasks Risk Register maintenance and reporting GTM Enablement support Tooling access requests Contractor request reviews Travel security request reviews Security compliance evidence collection Triaging of questions and requests for the GRC team (and learning to provide risk advisory over time!) Policy review and revision Requirements Proven track record of cross-functional collaboration Experience leveraging AI to build automations to reduce manual workload Experience with security compliance frameworks and audits (e.g.
| Role | GRC Engineer I |
|---|---|
| Company | Brex |
| Location | São Paulo, São Paulo, Brazil |
| Type | contract |
| Compensation | Not disclosed |
| Posted | 2026-10-26 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4About Brex
Brex is a finance software platform that provides integrated financial services and software to help businesses manage their operations. The company serves over 35,000 customers, including startups, mid-size companies, and enterprises, as well as ecommerce brands. Its platform offers a suite of tools designed to automate financial workflows, including corporate cards, expense management, bill pay, accounting automation, and banking and treasury services. By utilizing AI-powered controls and integrations, Brex aims to help organizations manage spending, automate manual tasks, and operate globally across more than 120 countries. The platform is designed to support companies through various stages of growth, from initial launch to scaling operations.
More at Brex
Other jobs at Brex
- Startups Account Executive · San Francisco, California, United States
- Director, Performance Marketing · New York, New York, United States
- Fraud Strategy Associate · São Paulo, São Paulo, Brazil
- Senior Field Marketing Manager · Remote
- Software Engineer II, Data Enablement Platform · New York, New York, United States
Explore Related Placements
// similar opportunities
You might also like
Fullstack Engineer
Asana
The Product team builds features end-to-end. From designing our data models to implementing the subtle interaction behaviors that differentiate good software fr...
Senior Data Center Engineer
Roblox
Every day, tens of millions of people come to Roblox to explore, create, play, learn, and connect with friends in 3D immersive digital experiences– all created ...
Engineering Manager, Finance Engineering
Anthropic
About Anthropic Anthropic’s mission is to create reliable, interpretable, and steerable AI systems. We want AI to be safe and beneficial for our users and for s...
Senior Software Engineer
Asana
The Product team builds features end-to-end. From designing our data models to implementing the subtle interaction behaviors that differentiate good software fr...
Software Engineer II, Fintech
Twitch
About Us Twitch is the world’s biggest live streaming service, with global communities built around gaming, entertainment, music, sports, cooking, and more. It ...
QA Engineer (contract)
Japan Dev
QA Engineer (Contract)...
0-1 year experience eligible.