Join 7AI as a GRC Engineer to manage compliance programs and ensure security assurance for customers.
Posted by employer 9 hours ago
First seen on Joblaze 1 hour ago
Last verified on the company career page 1 hour ago
What you'll build
- Manage and maintain compliance program
- Prepare for and support audits
- Run internal audits
- Run third-party risk management
- Keep internal stakeholders informed on GRC projects
Must have
- 5+ years of experience in GRC, compliance, or security risk
- Hands-on experience supporting SOC 2 audits
- Experience running third-party risk management
- Experience with a compliance automation platform
- Experience running internal audits
Nice to have
- Bachelors or Masters degree
- Hands-on experience with SaaS compliance automation platforms
- Experience in a security vendor or fast-growing startup
- Exposure to AI governance
- Scripting skills, such as Python or SQL
- Certifications such as CISA, CRISC, CISSP
AI in the day-to-day
Use AI to automate repeatable GRC work, such as evidence collection, questionnaire responses, and control testing.
Requirements
- Experience
- 5+ years
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Joblaze summary
In the role of GRC Engineer at 7AI, the individual will manage the compliance program, ensuring that the company remains audit-ready while addressing security inquiries from customers and vendors. Key skills include hands-on experience with SOC 2 audits and familiarity with compliance automation platforms, alongside a solid understanding of third-party risk management. This position is ideal for someone with over five years in GRC or security risk, particularly those who thrive in a fast-paced startup environment and possess a proactive approach to problem-solving.
Joblaze insights
Quick facts
- How much experience is required?
- At least 5 years of relevant experience for this GRC Engineer role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: FedRAMP, GRC, ISO 27001, ISO 42001, SOC 2, compliance automation.
- What seniority level is this role?
- 7AI targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this GRC Engineer role at 7AI.
From the original posting
Overview
As our GRC Engineer you'll keep 7AI audit-ready and make security assurance easy for our customers. You'll run our compliance program day to day, work directly with customers and vendors on their security questions, and keep internal teams current on where every initiative stands.
What You'll Do
Manage and maintain our compliance program through our compliance automation platform. Keeping controls, evidence, and integrations current.
Prepare for and support SOC 2, ISO, and FedRAMP audits, as well as assessments supporting other regulatory frameworks, as required by the business and our customers.
Run internal audits. Test controls, document findings, and track remediation through to closure.
Run third-party risk management. Assess vendors, review their security documentation, and maintain the vendor risk register.
Work with customers on security questionnaires, compliance documentation, and assurance requests.
Work with vendors to collect evidence and close gaps.
Keep internal stakeholders informed on GRC projects and initiatives, with clear status tracking from start to finish.
Use AI to automate repeatable GRC work, such as evidence collection, questionnaire responses, and control testing.
Keep policies, control descriptions, and risk records accurate as frameworks and our business change.
What We're Looking For
5+ years of experience in GRC, compliance, or security risk.
Hands-on experience supporting SOC 2 audits, and working knowledge of ISO 27001, ISO 42001 and FedRAMP.
Experience running third-party risk management, including vendor assessments.
Experience with a compliance automation platform such as Scytale, Vanta, or Drata.
Experience running internal audits or control testing.
Comfort talking with customers and vendors about security, in plain language.
Strong project tracking habits, and a track record of keeping stakeholders informed.
Practical experience using AI tools to speed up your own work, and curiosity about what else can be automated.
A doer's mindset. You spot what needs to happen and start, without waiting to be asked.
Nice to Have
Bachelors or Masters degree
Hands-on experience with SaaS compliance automation platforms.
Experience in a security vendor or fast-growing startup, especially in customer-facing security assurance.
Exposure to AI governance, such as ISO 42001 or the NIST AI RMF.
Scripting skills, such as Python or SQL, to automate evidence collection and reporting.
Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Auditor or Lead Implementer.
Standard company text repeated across 7AI's postings is omitted here.