AI Engineer – GRC

About RezilensRezilens is a GRC (Governance, Risk, and Compliance) product and services company building DiGRC, an AI-enabled GRC platform that helps organizations automate risk, compliance, and audit workflows. We work with enterprise and regulated clients across the UAE and wider GCC region, and we're growing our engineering team to push the boundaries of applied AI in the compliance space.About the RoleWe're looking for an AI Engineer to design, build, and ship AI-powered features inside DiGRC — from LLM-driven risk analysis and control mapping to automated evidence review and compliance-gap detection. You'll work closely with our GRC domain experts and product team to turn deep regulatory and audit knowledge into reliable, production-grade AI systems.This is a hands-on engineering role for someone who wants to apply modern AI/ML techniques to a real, high-stakes domain — not a research-only position.What You'll DoDesign and build LLM-powered features for risk assessment, control-to-framework mapping (e.g. ISO 27001, NIST, SOC 2, local UAE/GCC regulations), policy analysis, and audit evidence review.Build and maintain RAG (retrieval-augmented generation) pipelines over regulatory frameworks, internal policies, and audit documentation.Develop agentic workflows/automation that reduce manual GRC analyst effort (e.g. auto-drafting risk registers, gap analyses, remediation plans).Evaluate, fine-tune, and productionize LLMs and embedding models; own prompt engineering, evaluation harnesses, and guardrails for accuracy and hallucination control.Partner with GRC subject-matter experts to translate compliance logic (frameworks, controls, risk scoring methodologies) into structured, model-usable knowledge.Build observability, evaluation, and QA processes to ensure AI outputs meet the accuracy and auditability bar required in a regulated/compliance context.Collaborate with backend/platform engineers to integrate AI services into the core DiGRC product (APIs, data pipelines, vector stores).Stay current on AI safety, security, and governance practices — and ideally help apply "AI governing AI" thinking, since we sell GRC and should practice it internally.What We're Looking For3+ years of software engineering experience, with 1-2+ years building production AI/ML or LLM-powered applications.Strong Python skills; experience with LLM frameworks (LangChain, LlamaIndex, or similar) and vector databases (Pinecone, Weaviate, pgvector, etc.).Hands-on experience with RAG architectures, prompt engineering, and LLM evaluation/testing methodologies.Solid understanding of API design and integrating AI services into full-stack products.Comfortable working with unstructured/semi-structured documents (policies, regulatory texts, audit reports) and turning them into usable data.Strong communication skills — able to work directly with GRC/compliance domain experts who aren't engineers.Bias toward shipping: comfortable in a startup/scale-up environment with fast iteration cycles.Nice to HavePrior exposure to GRC, InfoSec, risk management, or compliance domains (ISO 27001, NIST CSF, SOC 2, GDPR, or UAE-specific regulatory frameworks).Experience fine-tuning open-source LLMs or working with multi-agent orchestration frameworks.Familiarity with AI security/governance concepts (model risk, hallucination mitigation, guardrails, audit trails for AI decisions).Experience in a regulated industry (fintech, cybersecurity, audit/assurance) where output accuracy and explainability are critical.Why RezilensWork on AI applied to a real, high-value problem — not another chatbot wrapper.Direct collaboration with the CTO and a lean, senior engineering team.Exposure to enterprise GRC clients across the UAE/GCC and a fast-growing product (DiGRC), recently showcased at GISEC GLOBAL 2026.Dubai-based team with a builder culture — ship fast, iterate with real customer feedback.