GRC Engineer

present of AI; Boston (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

7AI is seeking a seasoned GRC/compliance professional to run the day-to-day compliance program, maintain controls and evidence, and support SOC 2, ISO, and FedRAMP audits. You will leverage AI tools to automate evidence gathering and reporting while interpreting governance frameworks for AI systems.

In this role you will communicate security posture to customers and vendors, drive audit readiness, and help shape AI governance practices within a company whose product is AI agents.

Qualifications

• Hands-on GRC work across SOC 2, ISO and FedRAMP
• Ability to explain security matters plainly to customers and vendors
• Strong project tracking and proactive mindset

Responsibilities

• Run day-to-day compliance program; maintain controls and evidence
• Support SOC 2, ISO and FedRAMP audits
• Test controls internally and manage vendor risk
• Explain security matters clearly to customers and vendors
• Develop and automate evidence gathering and reporting using scripting

Skills

GRC

SOC 2

Auditing

Vendor risk management

Tools

Scripting

Job description

The role runs a compliance program day to day: keeping controls and evidence current, supporting SOC 2, ISO and FedRAMP audits, testing controls internally, and managing vendor risk. A strong candidate has several years of hands on GRC work, has helped carry a SOC 2 audit, and can explain security matters plainly to customers and vendors. Solid project tracking and a habit of acting without being prompted matter as much as framework knowledge.

How it fits the AI era

AI is already part of the job description: repeatable work like evidence collection, questionnaire responses and control testing is expected to be automated. That shifts the human effort toward judgment, framework interpretation, audit readiness and clear communication with customers and vendors. The role sits inside a company whose product is AI agents, so the compliance work also touches how AI systems are governed.

How it builds AI experience

The job offers direct practice using AI tools to speed up GRC tasks, plus exposure to AI governance frameworks such as ISO 42001 and the NIST AI RMF. Building on that means learning to automate evidence gathering and reporting, for example with scripting, and getting familiar with how AI systems are assessed and controlled. That combination is useful at a company selling AI agents for security operations.

Worth showing

• ISO 27001 and FedRAMP
• Internal control testing

This is our own read, written from the employer's posting and the company's Spotlight. The employer's posting is the source of truth for the role.

About 7AI

Teams of AI agents that triage and investigate security alerts, so human analysts only see the ones that matter.