GRC Engineer
- Location
- Boston, MA (Remote) · On-site
- Job type
- Full-time
- Level
- Senior
- Experience
- 5+ years
- Education
- Bachelor's degree
- Listed
- 14 days ago
Skills & highlights for this role
- GRC
- Compliance
- Security risk
- SOC 2 audit support
- ISO 27001
- ISO 42001
- FedRAMP
- Third-party risk management
- Vendor assessments
- Compliance automation platform (Scytale, Vanta, or Drata)
- Internal audits
- Control testing
- Customer and vendor security communication
- Project tracking
Also useful
- SaaS compliance automation platform experience
- Security vendor or startup experience
- Customer-facing security assurance
- AI governance (ISO 42001, NIST AI RMF)
- Python
- SQL
- CISA
- CRISC
Overview
As our GRC Engineer you'll keep 7AI audit-ready and make security assurance easy for our customers. You'll run our compliance program day to day, work directly with customers and vendors on their security questions, and keep internal teams current on where every initiative stands.
What You'll Do
- Manage and maintain our compliance program through our compliance automation platform. Keeping controls, evidence, and integrations current.
- Prepare for and support SOC 2, ISO, and FedRAMP audits, as well as assessments supporting other regulatory frameworks, as required by the business and our customers.
- Run internal audits. Test controls, document findings, and track remediation through to closure.
- Run third-party risk management. Assess vendors, review their security documentation, and maintain the vendor risk register.
- Work with customers on security questionnaires, compliance documentation, and assurance requests.
- Work with vendors to collect evidence and close gaps.
- Keep internal stakeholders informed on GRC projects and initiatives, with clear status tracking from start to finish.
- Use AI to automate repeatable GRC work, such as evidence collection, questionnaire responses, and control testing.
- Keep policies, control descriptions, and risk records accurate as frameworks and our business change.
What We're Looking for
- 5+ years of experience in GRC, compliance, or security risk.
- Hands-on experience supporting SOC 2 audits, and working knowledge of ISO 27001, ISO 42001 and FedRAMP.
- Experience running third-party risk management, including vendor assessments.
- Experience with a compliance automation platform such as Scytale, Vanta, or Drata.
- Experience running internal audits or control testing.
- Comfort talking with customers and vendors about security, in plain language.
- Strong project tracking habits, and a track record of keeping stakeholders informed.
- Practical experience using AI tools to speed up your own work, and curiosity about what else can be automated.
- A doer's mindset. You spot what needs to happen and start, without waiting to be asked.
Nice to Have
- Bachelors or Masters degree
- Hands-on experience with SaaS compliance automation platforms.
- Experience in a security vendor or fast-growing startup, especially in customer-facing security assurance.
- Exposure to AI governance, such as ISO 42001 or the NIST AI RMF.
- Scripting skills, such as Python or SQL, to automate evidence collection and reporting.
- Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor or Lead Implementer.
About 7Ai
7AI is the foundational AI security company. Founded in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, we came out of stealth in February 2025 to take on the non-human work of the SOC. Our platform pairs a federated SIEM with AI agents that detect, investigate, respond, and hunt, plus dedicated threat hunting and threat intelligence, with humans on the loop.
Backed by $166 million in total funding from investors including Index Ventures and Blackstone, we're building the AI foundation for security operations in the agentic era, and we're still early. That's the appeal: you'll join at a pivotal stage where your work shapes what 7AI becomes, alongside security veterans who've built this before. Our culture runs on respect, collaboration, and a shared bar for excellence, all pointed at one goal, delivering real outcomes for the customers who trust us to defend them.
From Seven AI's careers page, first listed on Rolev.ai on October 26, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this GRC Engineer role at Seven AI, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Common questions
Where is the GRC Engineer job at Seven AI located?
Yes, this GRC Engineer opening at Seven AI is listed as Boston, MA (Remote) (On-site). Always check Seven AI's application page for specific state eligibility or relocation policies.
What qualifications are required for GRC Engineer at Seven AI?
For the GRC Engineer role, Seven AI highlights 5+ years of relevant experience; a bachelor's degree; experience with GRC, Compliance, Security risk, SOC 2 audit support, ISO 27001, ISO 42001. Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the GRC Engineer position at Seven AI?
This listing links directly to Seven AI's Ashby application page. You can apply directly on Seven AI's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Ashby application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.