Senior GRC Analyst

Responsibilities

• Manage and support compliance certifications including SOC 2, HITRUST, and ISO 27001 audits
• Serve as the subject matter expert on compliance frameworks across the company
• Act as the primary point of contact for external auditors and assessors
• Manage the Security and Privacy trust center
• Maintain the risk register and drive risk identification, scoring, and reporting
• Manage the maintenance of compliance policies, standards, and procedures
• Report on compliance posture to senior leadership
• Scale the GRC function using AI and automation

Requirements

• 5+ years of experience in GRC, IT audit, or information security compliance
• Prior experience with HITRUST, SOC 2, and ISO 27001 audits
• Hands‑on experience with control design, evidence collection, and remediation in cloud‑native environments
• Ability to communicate effectively with engineers, ...