GRC Engineer
At Seven AI · Boston, MA; Boston, Massachusetts, United States
Salary: US$130,000–180,000 a year
- Engineering
- Full-time
See how well you match Match me reads your CV and picks the jobs that suit you best.
Get jobs like this within hours Radar emails you new jobs open to you within hours of us finding them, before most people see them.
Where you’ll work
Hybrid, based in Boston
“Boston, MA”
From the location.
“Boston, Massachusetts, United States”
From the job board field.
The job board lists it as hybrid.
Hybrid means some days in the office. The listing says how many, and where.
Report a mistake
- Posted
- 26 October 2026
- First seen by us
- 3 November 2026
- Last checked
- 23 hours ago
Job description
From Seven AI’s job post, as they wrote it.
About 7AI
7AI is the foundational AI security company. Founded in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, we came out of stealth in February 2025 to take on the non-human work of the SOC. Our platform pairs a federated SIEM with AI agents that detect, investigate, respond, and hunt, plus dedicated threat hunting and threat intelligence, with humans on the loop.
Backed by $166 million in total funding from investors including Index Ventures and Blackstone, we're building the AI foundation for security operations in the agentic era, and we're still early. That's the appeal: you'll join at a pivotal stage where your work shapes what 7AI becomes, alongside security veterans who've built this before. Our culture runs on respect, collaboration, and a shared bar for excellence, all pointed at one goal, delivering real outcomes for the customers who trust us to defend them.
Read the full description
Overview
As our GRC Engineer you'll keep 7AI audit-ready and make security assurance easy for our customers. You'll run our compliance program day to day, work directly with customers and vendors on their security questions, and keep internal teams current on where every initiative stands.
What You'll Do
* Manage and maintain our compliance program through our compliance automation platform. Keeping controls, evidence, and integrations current.
* Prepare for and support SOC 2, ISO, and FedRAMP audits, as well as assessments supporting other regulatory frameworks, as required by the business and our customers.
* Run internal audits. Test controls, document findings, and track remediation through to closure.
* Run third-party risk management. Assess vendors, review their security documentation, and maintain the vendor risk register.
* Work with customers on security questionnaires, compliance documentation, and assurance requests.
* Work with vendors to collect evidence and close gaps.
* Keep internal stakeholders informed on GRC projects and initiatives, with clear status tracking from start to finish.
* Use AI to automate repeatable GRC work, such as evidence collection, questionnaire responses, and control testing.
* Keep policies, control descriptions, and risk records accurate as frameworks and our business change.
What We're Looking For
* 5+ years of experience in GRC, compliance, or security risk.
* Hands-on experience supporting SOC 2 audits, and working knowledge of ISO 27001, ISO 42001 and FedRAMP.
* Experience running third-party risk management, including vendor assessments.
* Experience with a compliance automation platform such as Scytale, Vanta, or Drata.
* Experience running internal audits or control testing.
* Comfort talking with customers and vendors about security, in plain language.
* Strong project tracking habits, and a track record of keeping stakeholders informed.
* Practical experience using AI tools to speed up your own work, and curiosity about what else can be automated.
* A doer's mindset. You spot what needs to happen and start, without waiting to be asked.
Nice to Have
* Bachelors or Masters degree
* Hands-on experience with SaaS compliance automation platforms.
* Experience in a security vendor or fast-growing startup, especially in customer-facing security assurance.
* Exposure to AI governance, such as ISO 42001 or the NIST AI RMF.
* Scripting skills, such as Python or SQL, to automate evidence collection and reporting.
* Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor or Lead Implementer.
GRC EngineerSeven AI
Apply on Seven AI (opens in a new tab)Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.
