GRC Engineer for AI Security & Audit Automation

Seven AI; Boston (MA); Vor Ort; USD 120.000 - 170.000; Vollzeit

Zusammenfassung

7AI is seeking a GRC Engineer to own and run our compliance program in a fast-growing security-focused environment in Boston. You will manage SOC 2, ISO 27001/42001, and FedRAMP activities, coordinate with customers and vendors, and continuously improve controls and evidence collection.

You will leverage AI to automate repetitive GRC tasks, maintain risk registers, and ensure stakeholders stay informed with clear status updates.

Qualifikationen

• 5+ years of experience in GRC, compliance, or security risk.
• Hands-on experience supporting SOC 2 audits, and working knowledge of ISO 27001, ISO 42001 and FedRAMP.
• Experience running third-party risk management, including vendor assessments.
• Experience with a compliance automation platform such as Scytale, Vanta, or Drata.
• Experience running internal audits or control testing.
• Comfort talking with customers and vendors about security, in plain language.
• Strong project tracking habits, and a track record of keeping stakeholders informed.
• Practical experience using AI tools to speed up your own work, and curiosity about what else can be automated.
• A doer's mindset. You spot what needs to happen and start, without waiting to be asked.

Aufgaben

• Manage and maintain our compliance program through our compliance automation platform. Keeping controls, evidence, and integrations current.
• Prepare for and support SOC 2, ISO, and FedRAMP audits, as well as assessments supporting other regulatory frameworks, as required by the business and our customers.
• Run internal audits. Test controls, document findings, and track remediation through to closure.
• Run third-party risk management. Assess vendors, review their security documentation, and maintain the vendor risk register.
• Work with customers on security questionnaires, compliance documentation, and assurance requests.
• Work with vendors to collect evidence and close gaps.
• Keep internal stakeholders informed on GRC projects and initiatives, with clear status tracking from start to finish.
• Use AI to automate repeatable GRC work, such as evidence collection, questionnaire responses, and control testing.
• Keep policies, control descriptions, and risk records accurate as frameworks and our business change.

Kenntnisse

GRC experience

SOC 2 audits

ISO 27001

ISO 42001

FedRAMP

Third-party risk management

Vendor assessments

Compliance automation platforms

Internal audits / control testing

AI-assisted automation

Project tracking

Customer & vendor communications

Scripting (Python/SQL)

Ausbildung

Bachelor's or Master's degree

Tools

Scytale

Vanta

Drata

Jobbeschreibung

7AI is seeking a GRC Engineer to own and run our compliance program in a fast-growing security-focused environment in Boston. You will manage SOC 2, ISO 27001/42001, and FedRAMP activities, coordinate with customers and vendors, and continuously improve controls and evidence collection.

You will leverage AI to automate repetitive GRC tasks, maintain risk registers, and ensure stakeholders stay informed with clear status updates.