Pick a job to read the details
Tap any role on the left — its description and apply link will open here.
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise-ready engineering organization, and we are building the team that will take us there. As a platform handling sensitive security and regulatory data for enterprise and government customers, security is not a compliance checkbox at RegScale. It is a core engineering discipline woven into how we build software.
The Role
This is a high autonomy role for a seasoned security engineer who thrives at the center of a complex engineering organization. You are the primary application security practitioner at RegScale. You identify where the risk is, build the strategy to address it, and drive initiatives from concept to measurable improvement without a team beneath you and without direct authority over the engineers you depend on to execute.
Your reach spans all of engineering including Core Engineering, Platform and AI, Compliance as Code, Quality Engineering, SRE, Infrastructure, and the external security team. You succeed by making engineers more security conscious and embedding security into how software is designed, built, and deployed rather than finding vulnerabilities after the fact.
RegScale serves enterprises and government agencies under frameworks like FedRAMP, NIST, and CMMC. This role reports into SRE and Infrastructure and requires deep technical security expertise combined with the organizational influence and end to end ownership mindset needed to make security a shared engineering value.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform purpose-built to deliver fast and efficient GRC outcomes. We help organizations break out of the slow and expensive realities that plague legacy GRC tools by bridging security, risk, and compliance through controls lifecycle management. By leveraging CCM, organizations experience massive process improvements like 90% faster certification times, and 60% less audit prep time. Today’s expansive security and compliance requirements can only be met with a modern, CCM based approach, and RegScale is the leader in that space.
Position:
RegScale is looking for a visionary UX Designer to shape the look, feel, and usability of our platform as we scale. This is a high-impact leadership role responsible for building and driving the design strategy across the RegScale platform and apps. You’ll be the creative force shaping how thousands of users interact with our product every day.
As our sole UX designer, you'll have the unique opportunity to influence every aspect of the platform's user experience, from user journeys to visual design and brand expression. This role offers both creative independence and meaningful ownership—you'll work cross-functionally with product, engineering, and leadership to translate user needs into elegant, intuitive solutions that make compliance management effortless.
Position must be a US Citizen. This is a remote position; however, candidate will be expected to travel to our R&D office in Knoxville, TN approximately once a quarter. If you’re ready to work on the most cutting-edge design challenges, we are excited to have you on our team.
Key Responsibilities:
Required Skills:
Preferred Skills:
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. Integrations are central to how RegScale delivers value, connecting the platform to the security, engineering, and business tools our customers depend on daily and ensuring compliance data flows reliably across complex enterprise environments.
The Role
Senior Software Engineers on the Integrations team own the design and delivery of the systems that connect RegScale to the outside world. You think in frameworks and patterns, building reusable foundations that make every subsequent integration faster, more reliable, and easier to maintain. You take ownership of your work from design through production and measure your success not just by what you deliver but by the quality and reusability of what you leave behind.
You will tackle genuinely hard problems including synchronizing millions of security findings while maintaining data integrity, building resilient integrations that handle rate limits and eventual consistency, and designing data models that work across diverse and unpredictable vendor APIs. You will work closely with Product, Customer Enablement, and Platform Engineering to ensure integrations are built on sound engineering foundations and reflect real customer usage patterns in the GRC domain.
This role is for an engineer who brings strong systems thinking, takes end to end ownership, and is energized by the challenge of making complex external ecosystems work reliably inside an enterprise compliance platform.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. This is a meaningful problem domain: the work you build directly helps organizations manage risk, meet regulatory requirements, and operate more securely at scale.
The Role
Senior Quality Engineers at RegScale are engineering partners. You are embedded in the work from the beginning, shaping how features are designed, what risks matter most, and how the team as a whole take's responsibility for quality.
Your primary contribution is strategic. You assess what it takes to build high quality software in a complex GRC domain, determine the right combination of manual and automated approaches for each situation, and work alongside developers to ensure quality is built in from the start. You bring strong problem-solving skills and the judgment to know where testing efforts will have the greatest impact given real world customer usage patterns.
You are comfortable writing automation when automation is the right tool, and equally comfortable making the case for exploratory or manual approaches when they are not. You think about quality as a system, not a checklist. This role is for a Quality Engineer who is ready to influence how an engineering organization builds software, not just verify that it works.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. This is a meaningful problem domain: the work you build directly helps organizations manage risk, meet regulatory requirements, and operate more securely at scale.
The Role
Senior Software Engineers at RegScale own their work end to end. You take a requirement, shape it into a sound technical approach, build it across the full stack, ensure it is tested and stable, and see it through to production. You are accountable for the quality and outcomes of what you deliver, not just the code you write.
You will contribute across customer-facing GRC capabilities including workflows, compliance features, reporting, and user experience, as well as the platform services and APIs that support them. You bring genuine capability at each layer of the stack: frontend, backend, and data. You raise the quality of the work around you through code review, clear communication, and a willingness to share what you know.
This role is for someone who is ready to operate with a high degree of independence, take pride in what they ship, and grow into broader technical influence over time.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. This is a meaningful problem domain: the work you build directly helps organizations manage risk, meet regulatory requirements, and operate more securely at scale.
The Role
Principal Software Engineers at RegScale operate at the intersection of deep technical craft and organizational impact. A Principal Engineer at RegScale owns a system, a capability, an architectural boundary, or a set of patterns that other engineers build on top of. Your work has reach beyond your squad. The decisions you make and the standards you set shape how the broader engineering organization builds software.
You will work across customer-facing GRC capabilities and the platform primitives that underpin them including APIs, data services, SDK, scalability, and performance. You are expected to identify problems before they become crises, propose solutions that others can execute, and drive technical initiatives across team boundaries without relying on direct authority. You build consensus through credibility, clarity, and demonstrated judgment.
This role is for an engineer who is energized by technical complexity, has the communication skills to navigate organizational complexity, and measures their success not just by what they build but by the capability and confidence they leave behind in the teams around them.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegsScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a continuous controls monitoring (CCM) platform that helps organizations automate and scale their security, risk, and compliance programs. We are at an inflection point, transitioning from startup execution to a disciplined, enterprise ready engineering organization, and we are building the team that will take us there. AI is central to where RegScale is going, woven into how compliance programs are automated, monitored, and delivered at scale.
The Role
Senior AI Engineers at RegScale own the design and delivery of production AI systems end to end. You bring genuine breadth across the AI engineering stack including data pipelines, model fine tuning and evaluation, agent design and orchestration, MCP server development, and AI safeguards, and you understand how these disciplines connect. You make sound decisions across all of them, not just within a narrow specialization.
Your work lives inside Platform Engineering and is consumed by product teams building GRC features and by integrators connecting RegScale to the broader compliance ecosystem. You build primitives and frameworks others build on top of, and you raise the bar for how the engineering organization thinks about and delivers AI in production.
This role is for an engineer who brings the same rigor to AI systems as to any other production engineering discipline, including reliability, observability, cost management, and ongoing behavior in the real world.
Key Responsibilities
Required Qualifications
Preferred Qualifications
RegScale is only able to hire US Citizens
Ready to apply?
Apply to RegScale
RegScale is a purpose-built cyber GRC platform designed to enable the CISO to track and monitor security controls. We help organizations break out of the slow and expensive realities that plague legacy GRC tools by bridging security, risk, and compliance through controls lifecycle management. By leveraging RegScale's Continuous Control Monitoring (CCM) instrumentation, organizations experience massive compliance process improvements like 90% faster certification times, and 60% less audit prep time. Today's expansive security and compliance requirements can only be met with a modern, CCM-based approach, and RegScale is the market leader in that space.
The Role
RegScale is seeking a Product Solutions Owner, Commercial Solutions to lead our expansion into commercial enterprise markets — spanning industries like financial services, healthcare, and technology. This role is for someone who is fundamentally dissatisfied with how GRC has always been done and is driven to replace legacy, manual compliance programs with modern, automated, AI-powered approaches.
You are not a requirements gatherer. You are an innovator. You've spent years inside compliance programs, felt the inefficiency firsthand, and now you want to tear it down and rebuild it with better tools. You think creatively about how software and AI can eliminate work that humans shouldn't be doing — and you have the credibility to convince compliance practitioners to trust the new way.
Reporting to the Chief Product Officer, you'll serve as the solution owner for our commercial verticals. You'll work directly with customers and prospects to understand their scaling challenges, define prescriptive and repeatable workflows that make complex compliance manageable, and validate that our platform delivers real-world impact. The through line of everything you do is tooling innovation: using RegScale's platform and emerging AI capabilities to solve problems that legacy GRC tools have failed to crack for decades.
Key Responsibilities
What We're Looking For
Bonus Points For
Ready to apply?
Apply to RegScale
Cookies & analytics
This site uses cookies from third-party services to deliver its features and to analyze traffic.