Security GRC Analyst II
Core
Answering high-volume security questionnaires, due diligence assessments, and RFP security sections for enterprise customers using AI-assisted tooling and verified evidence.
Role type
Mid-level IC Security GRC Analyst
Builds
Customer-facing trust content and self-serve answer libraries
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Required skills
Security GRC, compliance, IT audit, customer assurance, SOC 2, ISO 27001, SLA-driven work, precise written English, queue management, AI-assisted tooling verification
Preferred skills
Trust centre platforms (SafeBase, Whistic, Conveyor, Vanta), questionnaire frameworks (SIG, CAIQ, HECVAT, VSAQ), cloud security concepts (AWS, Azure, GCP), additional frameworks (NIST CSF, GDPR, HIPAA, DORA), Jira, Confluence, Salesforce, Microsoft 365
Responsibilities
Draft and verify security questionnaire responses against approved libraries and evidence; triage and route incoming requests using playbooks; maintain and expand the answer library; build customer-facing trust site content; package evidence for audits; track quality and throughput metrics
Seniority
Mid-level, hands-on IC