---
title: 'Senior GRC Engineer at Tandem Health'
canonical: 'https://feeny.ai/job/senior-grc-engineer-tandem-health-stockholm-hqzdzwpd90bc'
type: 'job'
last_seen: '2026-09-13'
---

# Senior GRC Engineer at Tandem Health 

- **Company:** Tandem Health 
- **Location:** Stockholm, Sweden
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-09-03
- **Last confirmed live:** 2026-09-13
- **Apply:** https://jobs.ashbyhq.com/tandem-health/abda453c-bab5-46c4-ae7d-7b07e47a882e

## Job description

Build something monumental for Healthcare!

At Tandem Health we’re reimagining healthcare by putting clinicians first. Our platform - designed by clinicians, for clinicians - is built on deep insight into real-world pain points, with intuitive medical notes and workflows that truly support patient care. We’re a fast-scaling health-tech company backed by top investors and expanding globally. We move fast, stay curious, and believe building something that matters starts with an extraordinary team. If you're passionate about impact and innovation, we'd love to meet you!

## About the role

You will lead the engineering behind our governance, risk and compliance (GRC) systems. You will turn security requirements into production controls, evidence pipelines and tests that show whether those controls operate as designed. The Senior GRC Engineer works across security, software engineering and compliance. On one day you might build a pipeline that collects cloud configuration evidence or write a test that detects a failed control. On another day, you might trace a system change to the policies and requirements it affects. You will work with the security, compliance, and legal teams to define the most pressing problems and deliver production solutions without detailed technical direction. And, more broadly, you will take initiative to close gaps that you identify in the course of your work.

## What you will do

- Build production systems that collect, validate and preserve technical control evidence.
- Automate shared security controls when a central implementation is the right solution.
- Write tests that show whether controls operate as designed and continue to work over time.
- Connect requirements, controls, implementations, tests, evidence, policies and procedures.
- Detect missing, stale or incomplete evidence. Route failures to a named owner and keep a traceable record.
- Build workflows that identify drift between approved policies and technical implementations.
- Prepare reproducible evidence packages for the Compliance team.
- Join audits as a technical subject matter expert.
- Answer internal questions for go-to-market teams about our compliance and security posture.
- Help the Compliance and Legal teams assess how new requirements affect our security controls and systems.
- Build, deploy and operate approved GRC automation in our production environment.
- Keep the systems maintainable through version control, tests, monitoring and clear operating documentation.

What success looks like Within your first few months, the first prioritised evidence pipelines and control tests should operate in production. The systems should show where evidence came from, whether it is current and when collection fails. The Compliance team should be able to reproduce selected for key requirements evidence without repeating the original manual work. Over your first year, the Compliance team should receive complete and traceable technical evidence by the agreed dates. Important evidence and control failures should be visible before an audit. Manual collection and evidence rework should decrease as automation covers more of the highest-priority controls.

## What you bring

You are a senior engineer who is comfortable owning a defined problem from design through production. You can work independently, explain your decisions and ask for help when a dependency or company-level decision blocks progress. You can:

- Build and operate production software, automation or data pipelines.
- Work with application programming interfaces, cloud services and structured data from several systems.
- Translate security or compliance requirements into technical controls and testable conditions.
- Design evidence records with clear provenance, scope, collection time and retention requirements.
- Build monitoring that detects failed collection, stale evidence and control failure.
- Apply software engineering practices to compliance work, including testing, version control and code review.
- Explain technical controls and evidence to engineers, compliance colleagues and auditors.
- Make sound engineering decisions when the implementation path is not prescribed.
- Balance automation with access control, data minimisation and operational safety.

We care more about demonstrated capability than a particular degree, certification or GRC platform.

Bonus points

- Experience with ISO 27001, C5, SOC 2 and other security or quality management assessments.
- Experience with controls as code, policy as code or continuous control monitoring.
- Experience in healthcare, another regulated environment or a high-growth technology company.
- Experience with infrastructure as code, cloud security, identity systems or continuous integration and delivery pipelines.
- Experience integrating compliance platforms or integrated management systems with technical data sources.
- Experience building evidence systems with access, retention and auditability requirements.
- Experience using AI to support control mapping, evidence review or policy analysis with human approval and traceable outputs.

Location We work best when we spend time together. You will work primarily from our headquarters in central Stockholm.

How to apply We review applications continuously. Please apply with your CV in English. Because Tandem handles sensitive patient data, we conduct a background check before hiring.

## Benefits

- Competitive salary and company stock options.
- 30 days of paid holiday each year.
- 5,000 SEK wellness allowance, plus 6,000 SEK each year for other health-related initiatives.
- Parental leave top-up for new parents.
- Private medical insurance.
- Mental health support through Mindler.
- Pension programme.
- Regular social and team activities, including off-sites and seasonal events.

We review our benefits regularly and may change them from time to time.

Culture at Tandem

At Tandem, we move fast, think big, and take ownership. We're a high-performing, diverse team with a shared drive to change the future of healthcare - and we’re just getting started. Our culture is built on action, ambition, and learning. You'll be trusted to take the lead, challenge yourself, and make an impact from day one. We believe real growth happens when you're stretched, supported, and surrounded by smart, passionate teammates who want to win together. Even though we’re spread across countries, we come together often in Sweden for team meetings, social events, and offsites - blending global reach with real human connection. We hire for talent, potential, and attitude - valuing different backgrounds and fresh perspectives. Great ideas come from everywhere, and we’re building a team that reflects the world we want to change.

Tandem handles sensitive patient data and will conduct a background check before hiring any candidate.

## About Tandem Health 

## Company Overview
- **One-liner**: Tandem Health builds an AI medical assistant that reduces administrative documentation work for clinicians, freeing up time for patient care.
- **Entity Type**: Private (raised $60M; Series unknown)
- **Headquarters**: Stockholm, Sweden (with offices in London, Paris, Madrid, Munich, Helsinki, Tallinn, Leiden, and more)
- **Founded**: August 2023
- **Founders**: Lukas Saari (CEO), Oscar Boldt-Christmas (CCO), Oliver Åstrand (CTO)

## Core Business
- **Primary industry**: Healthcare technology (AI-powered clinical documentation and decision support)
- **Target customers**: B2B – care organizations (hospitals, general practices, mental health providers, veterinary clinics) across Europe, with a focus on clinicians
- **Mission statement**: “Build AI that gives clinicians time back” — reducing admin work so attention stays with patients.

## Products & Services
- **AI Scribe**: Ambient voice technology that listens to consultations and automatically generates clinical notes, referrals, sick notes, and visit summaries. Supports 50+ specialties and over 100 EHR integrations.
- **Coding Assistant**: Automatically suggests relevant diagnosis and procedure codes (ICD-10, SNOMED) directly within the note.
- **Clinical Decision Support**: Provides evidence-based insights during the consultation workflow.
- **All products are CE marked under EU MDR as Class IIa medical devices** and comply with GDPR, ISO 13485, ISO 27001, and NHS DSPT.

## Market Standing
- **Valuation**: Not publicly disclosed
- **Key Metric**: $60M total funding raised (backed by Northzone and Kinnevik, with angel investors from OpenAI and other AI leaders)
- **Notable Investors/Partners**: Northzone (lead investor in Spotify, iZettle, Spring Health), Kinnevik (Cristina Stenbeck chair), and advisors like Björn Zoega (former hospital director of Karolinska University Hospital)
- **Growth Signals**: 170+ employees (as of mid-2025), 50+ clinicians on staff, trusted by 5,000+ care organizations across Europe, and has published research on AI impact after 375,000 notes generated.

## Competitive Advantages
- **Clinician-led design**: 50+ doctors and psychologists guide product development, ensuring it fits real clinical workflows.
- **Regulatory moat**: Products are MDR Class IIa certified, compliant with multiple national and international standards (GDPR, ISO 13485, ISO 27001, NHS DSPT, NEN 7510, ENS Nivel Alto) — a high barrier for competitors.
- **European data sovereignty**: All patient data stored and processed within EU data centers; no audio stored after transcription.
- **Deep EHR integration**: Over 100 integrations with European medical record systems, with ability to build custom integrations.

## Strategic Focus
- **Current priorities**: Scaling across European markets (offices in 10+ cities), deepening EHR integrations, and expanding to new care settings (mental health, veterinary, etc.).
- **Product direction**: Continuous improvement of personalization (notes that adapt to each clinician’s style) and expansion of AI capabilities beyond scribing into coding and clinical decision support.

## Why Work Here
- **Culture**: Values include “hunger to improve,” speed, care, openness, and constant drive to improve. The team includes clinicians, engineers, and operators working side by side.
- **Remote/hybrid**: Local offices in multiple European cities; hybrid work model common (details on policy not specified but multiple office locations suggest flexibility).
- **Notable perks**: Opportunity to work on regulated clinical AI at the intersection of healthcare and cutting-edge technology; direct collaboration with practicing clinicians; significant impact on reducing clinician burnout.
- **Engineering culture**: Founded by engineers with backgrounds at Google X, Uber, Spotify, and McKinsey; strong emphasis on turning research into reliable products.

## Sources
1. [tandemhealth.ai – Careers page](https://tandemhealth.ai/en/about/careers)
2. [tandemhealth.ai – Our story](https://tandemhealth.ai/en/about/our-story)
3. [tandemhealth.ai – Homepage](https://tandemhealth.ai/)
4. [LinkedIn – Tandem Health](https://www.linkedin.com/company/tandem-health/)

## Other roles at Tandem Health 

- [Project Delivery Specialist](https://feeny.ai/job/project-delivery-specialist-tandem-health-leiden-m6aafw9cxj9s) — Leiden, Netherlands
- [Customer Success Specialist - 6 month FTC (parental leave cover)](https://feeny.ai/job/customer-success-specialist-6-month-ftc-parental-leave-cover-tandem-health-20pnd3fm9m4g) — Leiden, Netherlands
- [Medical Operations Dentistry - Finland](https://feeny.ai/job/medical-operations-dentistry-finland-tandem-health-helsinki-d5aw6knsyqxg) — Helsinki, Finland
- [Senior Account Executive - Finland](https://feeny.ai/job/senior-account-executive-finland-tandem-health-helsinki-0sx048v3q9pk) — Helsinki, Finland
- [Account Executive - Stockholm](https://feeny.ai/job/account-executive-stockholm-tandem-health-stockholm-c95rdn2qc1es) — Stockholm, Sweden
- [Project Delivery Specialist - Helsinki](https://feeny.ai/job/project-delivery-specialist-helsinki-tandem-health-helsinki-zp4avjeasjgk) — Helsinki, Finland
- [Medical Operations - Finland](https://feeny.ai/job/medical-operations-finland-tandem-health-helsinki-d4dejr0enapm) — Helsinki, Finland
- [Senior Security Operations Engineer](https://feeny.ai/job/senior-security-operations-engineer-tandem-health-stockholm-wdrhtpwmx1s6) — Stockholm, Sweden
- [Analytics Engineer](https://feeny.ai/job/analytics-engineer-tandem-health-stockholm-epch7tax5cdw) — Stockholm, Sweden
- [Project Delivery Associate - Norway](https://feeny.ai/job/project-delivery-associate-norway-tandem-health-norway-8y9m2r622a46) — Norway