SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 100,000 - 258,000 / annual
xAI (SpaceXSI) is seeking a mid-to-senior Governance, Risk, and Compliance (GRC) professional to serve as a security-minded presales engineer supporting the sales organization. This hybrid role bridges cybersecurity, GRC, vendor management, and sales enablement, requiring someone who can act as a trusted security and compliance subject matter expert in customer meetings, accurately complete vendor security questionnaires, and help operate third-party risk and vendor management processes.
You will support the sales organization by attending customer and prospect meetings to present security and compliance posture, answering technical and control-related questions with accuracy and judgment. You'll own and continuously improve responses to customer vendor security questionnaires, RFPs, SIG/CAIQ-style assessments, and due-diligence requests, maintaining a reusable knowledge base of control narratives grounded in how SpaceXSI actually operates.
The role requires building and maintaining working fluency across the SpaceXSI environment—AI/LLM systems and model governance, CI/CD pipelines, identity and access management, DevOps and DevSecOps practices, Kubernetes platforms, and governance of IT and AI environments—sufficient to answer customer questions and escalate appropriately to engineering when needed.
You will partner with Engineering, Security, Legal, and Product to keep questionnaire content, Trust Center materials, and security collateral current as architecture, controls, and certifications evolve. You'll translate customer security requirements into actionable internal asks, helping distinguish must-have contractual or control commitments from unreasonable or out-of-scope demands. You'll contribute to policies, standards, and procedures related to third-party risk, customer assurance, and vendor security due diligence.
Additional responsibilities include coordinating with broader GRC and security teams on overlapping frameworks and evidence (SOC 2, ISO 27001, ISO 42001, privacy commitments) to ensure external answers remain consistent with internal control environment and GRC tooling (e.g., Vanta). You'll identify patterns in customer questionnaires and deal blockers, feeding insights back into product, engineering, and GRC roadmaps to reduce friction over time. You'll create and present concise status updates on questionnaire volume, deal-impacting security asks, vendor risk posture, and emerging customer assurance themes to sales leadership and GRC stakeholders. Finally, you'll champion clear, honest customer communication—building trust by explaining what SpaceXSI does, how it governs AI and infrastructure, and where it intentionally scopes risk.
REQUIREMENTS:
Basic Qualifications:
- Bachelor's degree in computer science, Information Security, Cybersecurity, or an engineering/STEM field
- 5+ years of experience in cybersecurity, GRC, third-party risk management, security assurance, or a closely related role with customer-facing or sales-adjacent responsibilities
- Demonstrated experience completing or owning customer vendor security questionnaires and participating in security due-diligence discussions with enterprise buyers
- Working technical fluency across several of: AI/LLM or ML platforms, CI/CD pipelines, identity and access management, DevOps/DevSecOps, Kubernetes, and cloud environments (AWS, GCP, or Azure)—enough to understand control implications and speak credibly with engineers and customers
- Solid understanding of common security and compliance frameworks used in customer assurance (SOC 2, ISO 27001, NIST CSF) and how controls map to questionnaire language
- Strong written and verbal communication skills, with ability to explain cybersecurity and GRC concepts to sales, customers, legal, and engineering audiences
Preferred Qualifications:
- 7+ years of cybersecurity, GRC, third-party risk, or customer trust/security assurance experience (mid-to-senior scope)
- Prior experience in a presales security, solutions engineering (security), customer trust, or sales-enablement GRC role at a technology, cloud, or AI company
- Hands-on or deeply adjacent experience with vendor risk management programs—onboarding assessments, continuous monitoring, contract security exhibits, and residual-risk reporting
- Familiarity with AI governance topics relevant to customer diligence (model data handling, prompt/output controls, training-data boundaries, ISO 42001/NIST AI RMF concepts, EU AI Act awareness)
- Experience maintaining a Trust Center, security FAQ library, or questionnaire knowledge base; familiarity with GRC platforms such as Vanta, Drata, or similar
- Ability to read architecture diagrams, IAM models, and pipeline/Kubernetes high-level designs and turn them into accurate, non-jargon customer narratives
- Comfort operating in fast-moving deal cycles while protecting accuracy—knowing when to say "I'll confirm with engineering" versus answering from established evidence
- Working knowledge of data privacy frameworks (GDPR, CCPA) as they appear in enterprise security and vendor assessments
- Certifications such as CISSP, CISA, CISM, CRISC, CTPRP, CIPT, CIPP/US, or similar
- Experience supporting public sector, financial services, or other highly regulated customer diligence processes
