Software Engineer, Risk Management

About Us Hyperproof is on a mission to transform the Governance, Risk, and Compliance (GRC) world with a powerful new software platform. With Hyperproof, companies can save time and money while also operating their programs at a much higher level of effectiveness and accountability. We envision a world where organizations we depend on are truly trustworthy — and Hyperproof is the platform that will get them there. We have a great team and culture — picture yourself in a highly collaborative startup environment where you can make a real impact on something truly important. It's an exciting time to be at Hyperproof; we raised our Series B round in 2023, validating our teamwork and company vision, and we continue to grow rapidly. As we continue to grow, we are seeking a talented Software Engineer to join our Risk Management team and help build first-party risk management features that help our customers identify, assess, and mitigate organizational risk. Who You Are You are a full-stack engineer with 3–5 years of experience who cares about building software that is correct, reliable, and genuinely useful. You thrive working across the stack — comfortable designing APIs in the morning and refining React components in the afternoon. You take pride in writing code that is well-tested and maintainable, and you understand that in a compliance domain, data integrity is not optional. You are excited by the challenge of translating complex domain logic — risk scoring, control testing, framework alignment — into clean, intuitive product experiences. You are comfortable asking questions, engaging in design discussions, and owning features end-to-end. You work well in a collaborative, async-first environment. What You Will Do As a Software Engineer on the Risk Management team, your responsibilities will include: Design, build, and ship first-party risk management features including risk register, inherent and residual risk scoring, and risk lifecycle workflows. Develop and extend control testing and monitoring capabilities — automated evidence checks, test cadence scheduling, and pass/fail logic tied to compliance outcomes. Build integrations with compliance frameworks including SOC 2, ISO 27001, NIST CSF, and others — enabling customers to map their controls and risks to the standards that matter to them. Collaborate with product managers and designers to translate compliance domain requirements into reliable, intuitive product experiences. Write backend services and APIs in C# (.NET), Node.js, and/or Python that are performant, well-documented, and testable. Build and maintain React/TypeScript front-end components that surface complex risk data in clean, actionable dashboards. Participate in design reviews and code reviews, contributing to engineering quality across the team. Work closely with QA to ensure correctness — you understand that in a compliance product, data integrity issues have real consequences for our customers. What You Will Bring Required: 3–5 years of software engineering experience in a product-focused company. Strong proficiency in React and TypeScript for front-end development. Experience with at least one of Java Springboot, Node.js, or Python for back-end API development. Comfort working across the full stack — you can own a feature from data model to UI. Familiarity with relational databases (PostgreSQL preferred) and writing efficient, well-structured queries. Solid understanding of REST API design principles and asynchronous patterns. A track record of writing well-tested code; you care about test coverage and the long-term cost of technical debt. Excellent communication skills; you can engage effectively in async and cross-functional team environments. A positive attitude and willingness to learn, adapt, and grow in a dynamic environment. Preferred: Exposure to GRC, compliance, audit, or risk management domains — even as an end user. Familiarity with compliance frameworks such as SOC 2, ISO 27001, NIST CSF, or…