GRC Engineer

Boston, MA, Remote. Posted 19 days ago

The role

The GRC Engineer will manage and maintain the compliance program through a compliance automation platform. This person will support audits, run third-party risk management, and work with customers and vendors on security assurance.

What you will do

Manage and maintain the compliance program through a compliance automation platform.
Prepare for and support SOC 2, ISO, and FedRAMP audits and other regulatory assessments.
Run internal audits, test controls, document findings, and track remediation.
Run third-party risk management by assessing vendors and maintaining the vendor risk register.
Work with customers on security questionnaires, compliance documentation, and assurance requests.
Work with vendors to collect evidence and close gaps.
Keep internal stakeholders informed on GRC projects and initiatives.
Use AI to automate repeatable GRC work.
Keep policies, control descriptions, and risk records accurate.

Required qualifications

5+ years of experience in GRC, compliance, or security risk.
Hands-on experience supporting SOC 2 audits.
Working knowledge of ISO 27001, ISO 42001 and FedRAMP.
Experience running third-party risk management, including vendor assessments.
Experience with a compliance automation platform such as Scytale, Vanta, or Drata.
Experience running internal audits or control testing.
Comfort talking with customers and vendors about security, in plain language.
Strong project tracking habits.
Practical experience using AI tools to speed up work.
A doer's mindset.

Nice to have

Bachelors or Masters degree
Hands-on experience with SaaS compliance automation platforms.
Experience in a security vendor or fast-growing startup, especially in customer-facing security assurance.
Exposure to AI governance, such as ISO 42001 or the NIST AI RMF.
Scripting skills, such as Python or SQL, to automate evidence collection and reporting.
Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor or Lead Implementer.

About the company

7AI is the foundational AI security company. Founded in 2024, the platform pairs a federated SIEM with AI agents to detect, investigate, respond, and hunt.