Senior IT GRC Analyst

Job Summary

Leading policy development and audit execution, the full-time Senior IT GRC Analyst will manage SOC 2 readiness efforts, maintain IT policies, and coordinate audit engagements in a remote environment.

Key responsibilities

• Lead SOC 2 readiness assessments, including scope definition and control design
• Serve as the primary contact during audit engagements and regulatory exams
• Develop and maintain IT policies and procedures to align with regulatory requirements

Required qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field (equivalent experience considered)
• 5+ years of experience in IT audit, compliance, or GRC within an enterprise IT environment
• Demonstrated experience managing SOC 2 audit cycles from scoping through remediation
• Direct experience in financial services or related regulated industries, with knowledge of applicable regulations
• Strong working knowledge of IT compliance frameworks such as NIST CSF, ISO 27001, or SOX