Senior GRC Analyst

Job Summary

To support compliance programs during a pivotal growth phase, the full-time Senior GRC Analyst will execute certification and audit processes for SOC 2 Type II and ISO standards, manage vendor risk assessments, and automate compliance tasks while working remotely from the United States.

Key responsibilities

• Drive audit cycles for SOC 2 Type II and ISO certifications, including evidence collection and control testing
• Support FedRAMP efforts through gap analysis, remediation planning, and documentation development
• Conduct vendor security assessments and manage ongoing compliance monitoring activities

Required qualifications

• 8-12 years of experience in IT compliance, security, or risk management
• Hands-on experience with ISO 27001 compliance and SOC 2 audit processes
• Experience supporting FedRAMP certification processes and conducting vendor security assessments
• Industry certifications such as CISSP, CISA, or CISM
• Strong project management skills with the ability to manage multiple compliance initiatives simultaneously