Senior GRC Analyst
Core
Own and drive the day-to-day execution of the Governance, Risk, and Compliance program, including SOX audit requirements, IT general controls, and customer trust support.
Role type
Senior GRC Analyst (IC)
Builds
Continuous compliance posture, audit-ready evidence, and automated GRC workflows
Domain
AI Infrastructure / Cloud Services / Energy
Required skills
SOX 404 audit expertise, IT general controls (ITGCs), SOC 2/ISO 27001/HIPAA frameworks, GRC platform management, user access reviews, vendor risk assessment, customer security questionnaires, AI tool utilization
Preferred skills
CISA/CRISC/CISSP certifications, public accounting background, high-growth tech experience, cloud environment familiarity (GCP/AWS/Azure), financial systems knowledge, AI risk assessment frameworks
Technologies
Vanta, Drata, AuditBoard, GCP, AWS, Azure, Gemini, Claude, Copilot
Responsibilities
Design, operate, and test IT general controls for SOX compliance; identify control gaps and drive remediation plans; collect and deliver audit evidence for SOX, SOC 2, ISO 27001, and HIPAA; coordinate User Access Reviews (UARs) across in-scope systems; maintain security policies and standards; respond to customer security questionnaires and due diligence requests; enhance GRC tools and automate compliance workflows; partner with IT, Security, Finance, and Engineering stakeholders
Seniority
Senior, hands-on IC
