Senior GRC Engineer

About the Company

Responsibilities

• ● ystems. You will turn security requirements into production controls, evidence pipelines and tests that show whether those controls operate as designed.
• ● The Senior GRC Engineer works across security, software engineering and compliance. On one day you might build a pipeline that collects cloud configuration evidence or write a test that detects a failed control. On another day, you might trace a system change to the policies and requirements it affects.
• ● You will work with the security, compliance, and legal teams to define the most pressing problems and deliver production solutions without detailed technical direction. And, more broadly, you will take initiative to close gaps that you identify in the course of your work.
• ● WHAT YOU WILL DO
• ● Build production systems that collect, validate and preserve technical control evidence.
• ● Automate shared security controls when a central implementation is the right solution.
• ● Write tests that show whether controls operate as designed and continue to work over time.
• ● Connect requirements, controls, implementations, tests, evidence, policies and procedures.
• ● Detect missing, stale or incomplete evidence. Route failures to a named owner and keep a traceable record.
• ● Build workflows that identify drift between approved policies and technical implementations.
• ● Prepare reproducible evidence packages for the Compliance team.
• ● Answer internal questions for go-to-market teams about our compliance and security posture.
• ● Help the Compliance and Legal teams assess how new requirements affect our security controls and systems.
• ● Build, deploy and operate approved GRC automation in our production environment.
• ● Keep the systems maintainable through version control, tests, monitoring and clear operating documentation.
• ● WHAT SUCCESS LOOKS LIKE
• ● Within your first few months, the first prioritised evidence pipelines and control tests should operate in production. The systems should show where evidence came from, whether it is current and when collection fails. The Compliance team should be able to reproduce selected for key requirements evidence without repeating the original manual work.
• ● Over your first year, the Compliance team should receive complete and traceable technical evidence by the agreed dates. Important evidence and control failures should be visible before an audit. Manual collection and evidence rework should decrease as automation covers more of the highest-priority controls.
• ● WHAT YOU BRING

Benefits

• ● Competitive salary and company stock options.
• ● days of paid holiday each year.
• ● ,000 SEK wellness allowance, plus 6,000 SEK each year for other health-related initiatives.
• ● Parental leave top-up for new parents.
• ● Private medical insurance.
• ● Mental health support through Mindler.
• ● Pension programme.
• ● Regular social and team activities, including off-sites and seasonal events.
• ● We review our benefits regularly and may change them from time to time.
• ● CULTURE AT TANDEM
• ● At Tandem, we move fast, think big, and take ownership. We're a high-performing, diverse team with a shared drive to change the future of healthcare - and we're just getting started.
• ● Our culture is built on action, ambition, and learning. You'll be trusted to take the lead, challenge yourself, and make an impact from day one. We believe real growth happens when you're stretched, supported, and surrounded by smart, passionate teammates who want to win together.
• ● Even though we're spread across countries, we come together often in Sweden for team meetings, social events, and offsites - blending global reach with real human connection.
• ● We hire for talent, potential, and attitude - valuing different backgrounds and fresh perspectives. Great ideas come from everywhere, and we're building a team that reflects the world we want to change.
• ● Tandem handles sensitive patient data and will conduct a background check before hiring any candidate.