Build the Foundation of Audit Defensibility
Join the team building RAMP: the first protocol that unites statutory regulatory compliance with quantitative frontier AI risk modeling.
Open Engineering & Practice Roles
We are building a distributed team of engineers, quantitative risk modelers, and audit practitioners.
Senior Audit Readiness Engineer
Design and automate Policy-as-Code mapping engines that translate infrastructure configurations into audit-defensible Test of Design (ToD) and Test of Effectiveness (ToE) workpaper packages.
Core Responsibilities
- •Author automated control assessment engines across SOC 2 Type II, ISO 27001, and HIPAA
- •Build structured workpaper compilers generating standard file packages for CCM tools and audit firms
- •Integrate cloud discovery metadata (AWS, GCP, GitHub, Okta) into deterministic evidence ledgers
- •Collaborate with lead auditors to ensure cryptographic non-repudiation of generated evidence files
Key Qualifications
- •5+ years software engineering experience in Go, Python, or TypeScript
- •Deep working knowledge of SOC 2 Trust Services Criteria and ISO 27001 Annex A controls
- •Experience with Open Policy Agent (OPA), Terraform, or cloud security posture tooling
Quantitative AI Risk Modeler ($VaR)
Advance VALORA's quantitative financial risk modeling engine, converting frontier AI drift, autonomous agent permissions, and prompt leakage risks into defensible dollar metrics ($VaR).
Core Responsibilities
- •Develop mathematical loss exposure models evaluating algorithmic AI vulnerabilities in dollar figures
- •Map frontier model pipelines and autonomous agents to NIST AI RMF 1.0 and ISO/IEC 42001 requirements
- •Design loss frequency and magnitude calibration curves for executive and board-level risk reporting
- •Publish authoritative research on quantitative AI governance and financial loss pricing
Key Qualifications
- •Degree in Quantitative Finance, Actuarial Science, Computer Science, or Cyber Risk Modeling
- •Experience modeling probabilistic loss scenarios and Value-at-Risk ($VaR)
- •Familiarity with frontier LLM vulnerabilities (OWASP Top 10 for LLMs, prompt injection, model drift)
Enterprise GRC & Audit Readiness Architect
Guide enterprise CISOs, CFOs, and compliance leaders through Day 1 audit scoping, cross-framework control harmonization, and audit firm workpaper hand-off.
Core Responsibilities
- •Lead 30-minute scoping walkthroughs and audit readiness evaluations for enterprise prospects
- •Harmonize fragmented client control environments across multi-regulatory frameworks
- •Review client evidence packages and ensure alignment with independent audit firm expectations
- •Bridge the technical gap between engineering infrastructure teams and compliance audit reviewers
Key Qualifications
- •7+ years experience in Big 4 IT audit, cybersecurity advisory, or Director-level GRC roles
- •Industry certifications preferred (CISA, CISSP, CISM, or CRISC)
- •Proven ability to articulate technical risk in clear financial and operational terms to executive boards
Don't see an exact match?
We are always interested in speaking with exceptional engineers and quantitative risk researchers. Send your resume and portfolio directly to our practice leaders.