--- title: 'GRC Engineer at Tractian' canonical: 'https://feeny.ai/job/grc-engineer-tractian-sao-paulo-hhye7peghh00' type: 'job' last_seen: '2026-11-03' --- # GRC Engineer at Tractian - **Company:** Tractian - **Location:** São Paulo, Brazil - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-10-30 - **Last confirmed live:** 2026-11-03 - **Apply:** https://jobs.gem.com/tractian-technologies-inc-/am9icG9zdDrrBXE88Tqpmxw_NZfOxrAd ## Job description GRC Engineer As a GRC Engineer, you will be part of our Governance, Risk, and Compliance (GRC) team, contributing to the development, implementation, and continuous improvement of our security governance, risk management, and compliance programs. You will collaborate with technical and business teams to strengthen security controls, manage risks, and support compliance with industry standards. We are looking for an experienced, hands-on, and versatile professional with strong GRC expertise and a technical mindset. You will work alongside the team to drive initiatives across multiple GRC domains, leveraging Artificial Intelligence (AI), automation, and emerging technologies to build scalable and efficient processes. ## Key Responsibilities - Develop, implement, and continuously improve information security governance, risk management, compliance, and assurance processes. - Support compliance with frameworks and standards such as ISO 27001, ISO 27002, SOC 2, and other applicable requirements. - Conduct risk assessments, evaluate security controls, maintain risk registers, and coordinate risk treatment and remediation activities. - Support internal and external audits, certification processes, evidence collection, and continuous compliance monitoring. - Develop and maintain security policies, standards, procedures, and governance documentation. - Improve Business Continuity Management (BCM), Disaster Recovery (DR), Incident Response (IR), and Third-Party Risk Management (TPRM) activities, including gap analysis, planning, exercises, and testing. - Assess secure software development practices and collaborate with Engineering teams to integrate security and compliance requirements into the Software Development Lifecycle (SDLC). - Conduct customer security and compliance due diligence, including security questionnaires, RFPs, and contractual security assessments. - Identify and implement opportunities to automate GRC processes using AI, APIs, integrations, and other technologies. - Collaborate with Engineering, Infrastructure, Security, Product, and business teams to integrate security and compliance requirements into operational and technical processes. ## Requirements - Background in Information Technology, Information Security, GRC, Internal Audit, Compliance, or related fields. - Proven hands-on experience implementing or improving information security governance, risk management, and compliance programs. - Experience with ISO 27001 / ISO 27002, SOC 2, or equivalent security frameworks. - Proven hands-on experience in Information Security Risk Management, including risk assessments, risk treatment, control evaluation, and remediation management. - Practical experience implementing or maintaining Business Continuity Management (BCM) and Disaster Recovery (DR) processes, including BIA, RTO/RPO, recovery planning, and testing. - Hands-on experience with Incident Response (IR) processes, including incident management, response procedures, exercises, and post-incident improvement. - Experience conducting Third-Party Risk Management (TPRM) assessments, evaluating vendor security controls, and managing associated risks. - Knowledge of data protection and privacy requirements, including LGPD and GDPR. - Understanding of assessing Secure Software Development practices, including SDLC security controls, code review processes, vulnerability management, etc. - Understanding of cloud infrastructure concepts, identity and access management, and cybersecurity concepts. - Experience supporting internal or external audits, compliance assessments, and evidence management. - Ability to independently assess risks, evaluate controls, and drive improvements across different GRC domains. - Ability to leverage AI, automation tools to improve workflows, solve problems, and increase operational efficiency. - Advanced Portuguese and English proficiency. ## Nice to Have - Experience with GRC platforms (e.g., Vanta, Drata). - Experience with Policy-as-Code or Compliance-as-Code - Familiarity with cloud environments (AWS, OCI, GCP), Infrastructure as Code (IaC), CI/CD pipelines, and Git-based workflows. - Experience building AI-assisted workflows or using LLMs and AI agents to automate GRC activities. - Knowledge of additional frameworks such as ISO 22301, ISO 27701, ISO 42001, NIST CSF, or FedRAMP. - Market-recognized security, risk management, or compliance certifications. ## Compensation & Benefits - Competitive Compensation - 30 days of paid annual leave - Education and courses stipend - Earn a trip anywhere in the world every 4 years - R$1.035/month for meals allowance - Health plan with national coverage and without coparticipation - Dental Insurance: we help you with dental treatment for a better quality of life. - Wellhub Membership: Access a wide range of gyms and training programs. ## About Tractian ## Company Overview - **One-liner**: Tractian is an industrial operating system company that combines AI-driven hardware, software, and sensor technology to predict machine failures, eliminate production downtime, and boost operational efficiency for factories worldwide. - **Entity Type**: Private (Series C, $120M raised as of December 2024) - **Headquarters**: Atlanta, Georgia, United States (with a significant hub and co-origin office in São Paulo, Brazil) - **Founded**: 2019 - **Founders**: Igor Marinelli (CEO and Founder) ## Core Business - **Primary industries**: Industrial IoT, Predictive Maintenance, Asset Condition Monitoring, Artificial Intelligence, Manufacturing Software - **Target customers**: B2B, Enterprise, Industrial operators (manufacturing plants, shop floors, maintenance teams) - **Mission**: To eliminate production downtime and elevate human potential in factories worldwide — bridging the gap between humans and machines by making maintenance and reliability a streamlined, cost-efficient advantage. ## Products & Services - **Tractian Asset Condition Monitoring Platform**: An end-to-end software solution that tracks, prioritizes, and acts on machine health data, providing clear priorities, reduced downtime, and higher uptime. - **Industrial-Grade Sensors**: Hardware devices built for accuracy and high-fidelity data collection on machine vibration, temperature, and other condition metrics. - **Industrial Copilot (AI)**: A GPT-based, specialized AI assistant that generates specific, actionable insights tailored to industrial environments, avoiding the context and accuracy issues of generic large language models. - **Assisted Maintenance**: A category pioneered by Tractian, using AI to identify problems on machines and suggest preventive actions, supporting maintenance professionals in real time. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed (private company); raised $120M in Series C in December 2024. - **Key Metric**: Total funding across 7+ rounds includes a $120M Series C (Dec 2024), a BRL 230M Series B (Aug 2023), and earlier seed rounds; annual revenue not publicly available (reported as $5M by a third-party aggregator, but considered a low estimate not confirmed by the company). - **Notable Investors/Partners**: Investor names not fully listed in public sources, but the Series C round included 4 investors and the Series B had 8 investors; the company has raised from multiple funds across its history. - **Growth Signals**: - Headcount grew 51.4% YoY to 405 employees (with 287 net-new hires) - Ranked #24 Fastest-Growing Company in North America - 126 active job openings at time of research - 110,000+ LinkedIn followers, growing 20.1% yearly - Customers' operations generate over 5% of global industrial GDP - Clients see 6–12x ROI, with an average of $6,000 saved per monitored machine annually ## Competitive Advantages - **Only end-to-end platform** in the market that combines hardware sensors, software, and AI to prevent machine failures and protect production. - **Specialized AI for industry**: Unlike generic LLMs, Tractian’s Industrial Copilot is trained/contextualized for industrial environments, providing precise, accurate, and actionable insights. - **First-mover category leadership**: Pioneered the "Assisted Maintenance" category and is recognized as a leader in IoT and Asset Management. - **Deep industry expertise**: Built by and staffed with people who understand shop-floor challenges, ensuring the product is practical and adopted by frontline workers. ## Strategic Focus - Scaling its position as the **Industrial Copilot** — moving beyond predictive maintenance to a broader AI-driven operational copilot that drives direct ROI. - Expanding global footprint across North America, South America, and Europe (with existing offices in Atlanta, São Paulo, Germany, and Spain). - Growing engineering, data, and go-to-market teams to accelerate product development and market penetration. - Continuing to digitize the largely undigitized industrial sector, enabling AI-driven optimization for manufacturing plants of all sizes. ## Why Work Here - **Meaningful work**: Directly empower the industrial and frontline workers who keep the global economy moving. - **High-growth environment**: 51%+ yearly headcount growth and strong external recognition make this a fast-moving, high-visibility place to build a career. - **Engineering culture**: Hardware developers, data scientists, and software engineers build cutting-edge technology from scratch on complex, hard-to-solve problems. - **Values ("Blue Caps")**: Customer obsession, transparency, ownership, demanding-and-supportive leadership, and uncompromising quality. - **Flexibility**: Work types include Remote, Hybrid, and On-site roles, depending on position and location. - **Compensation & culture**: Employee reviews show a 4.0/5.0 overall rating, with strong marks for compensation (4.5) and career development (4.1). - **Open technical roles**: Actively hiring for Analytics Engineer, Senior Data Engineer, Senior Frontend Software Engineer, and more. ## Sources 1. [tractian.com/en/about](https://tractian.com/en/about) 2. [tractian.com/en](https://tractian.com/en) 3. [careers.tractian.com](https://careers.tractian.com/) 4. [linkedin.com/company/tractian](https://www.linkedin.com/company/tractian) 5. [careers.tractian.com/jobs](https://careers.tractian.com/jobs) ## Other roles at Tractian - [Account Executive](https://feeny.ai/job/account-executive-tractian-monterrey-p3rg081sepk5) — Monterrey, Canada - [R&D Machining Analyst](https://feeny.ai/job/r-d-machining-analyst-tractian-sao-paulo-cjwwk4pdywcs) — São Paulo, Brazil - [Research and Development Intern, PhD Track](https://feeny.ai/job/research-and-development-intern-phd-track-tractian-atlanta-znccc9wk0tgg) — Atlanta, GA - [Generative AI Engineering Intern](https://feeny.ai/job/generative-ai-engineering-intern-tractian-atlanta-svy9g84tzy47) — Atlanta, GA - [Sales Development Intern](https://feeny.ai/job/sales-development-intern-tractian-atlanta-63kk9mynkkce) — Atlanta, GA - [Product Design Intern](https://feeny.ai/job/product-design-intern-tractian-atlanta-m5fpm83dgywd) — Atlanta, GA - [Analytics Intern - GTM](https://feeny.ai/job/analytics-intern-gtm-tractian-atlanta-e2def3bd3fxq) — Atlanta, GA - [Senior Product Marketing Manager](https://feeny.ai/job/senior-product-marketing-manager-tractian-sao-paulo-6dyb3fcg8hj4) — São Paulo, Brazil - [Senior Finance Analyst - Accounts Receivable](https://feeny.ai/job/senior-finance-analyst-accounts-receivable-tractian-atlanta-mee25qpr2dbf) — Atlanta, GA - [BDR Manager](https://feeny.ai/job/bdr-manager-tractian-atlanta-tbg0gxg9n9r5) — Atlanta, GA