Governance, Risk & Compliance GRC Security Engineer

About Neo4j:

Neo4j is the graph intelligence platform that transforms data into knowledge to power the next generation of intelligent applications and AI systems. It includes enterprise-ready knowledge graphs for accurate, explainable, and governed AI; the most comprehensive, trusted, and easy-to-deploy graph capabilities across any environment and data source; and an unmatched ecosystem trusted by 84 of the Fortune 100 and supported by the world’s largest graph community. Intelligence that works. Results that matter.

Built to work everywhere and integrate with everything across every cloud for dynamic, personalized, and autonomous AI systems. We deliver quicker results, contextual knowledge, and solutions that impact customers and employees across the business.

Our Vision:

At Neo4j, we have always strived to help the world make sense of data.

As business, society and knowledge become increasingly connected, our technology promotes innovation by helping organizations to find and understand data relationships. We created, drive and lead the graph database category, and we’re disrupting how organizations leverage their data to innovate and stay competitive.

The Team:

As a Governance, Risk & Compliance (GRC) Analyst, you will play a central role in shaping and strengthening our security and risk posture. You’ll act as a trusted partner to teams across the business—helping them navigate security decisions, manage risk effectively, and meet compliance requirements without slowing down innovation.

This is a high-impact, high-visibility role within the security team, reporting directly to the CISO. You’ll work at the intersection of security, engineering, and business operations—driving pragmatic, scalable approaches to risk management and compliance.

What You'll Do:

• Partner with stakeholders across the business to identify, assess, and drive remediation of security risks
• Support and evolve our compliance programmes (e.g. ISO 27001, SOC 2), from evidence gathering through to audit readiness and accreditation
• Design, implement, and continuously improve security controls and monitoring practices
• Build and automate GRC processes to improve efficiency, accuracy, and scalability
• Develop and maintain clear, actionable security policies, standards, and procedures
• Provide hands-on support during audits and act as a key point of contact for internal and external assessors
• Embed security into business decision-making by providing practical, risk-based guidance
• Own and mature vendor risk management across the full lifecycle
• Contribute to building a strong security culture through awareness and education initiatives

What We're Looking For:

• A pragmatic GRC practitioner who understands how to balance risk, security, and business velocity
• Experience working with security frameworks such as ISO 27001, SOC 2,