Senior GRC Analyst I – SOC 2

About the role

The Senior GRC Analyst I will lead SOC 2 audit engagements, ensuring client satisfaction and effective execution of audit plans. You will act as a coach and advisor to team members while building strong relationships with clients through deep technical understanding of their environments.

Key responsibilities

• Lead and conduct external audits of clients’ business processes and IT controls to achieve SOC 2 compliance.
• Observe, review, document and test key transactions, access, change‑management, operational and automated controls.
• Evaluate and test application controls across a wide range of systems and software applications.
• Identify business, IT and security risks and recommend control improvements.
• Assess security policies, risk‑management documentation and infrastructure components.
• Support internal and external security assessments for new and existing services.
• Develop and maintain strong client relationships, providing insights into risk and compliance.

Required profile

• Bachelor’s degree required.
• Minimum 3 years of IT audit or general audit experience.
• Proven experience leading SOC 2 audits.
• Experience reviewing, designing and advising on IT controls.
• Preferred experience in teaching, training or mentoring staff.
• Relevant certifications (CISA, CISSP, CIPP) are a plus.
• Familiarity with SOC 2 readiness platforms such as Drata or Vanta is preferred.

Required skills

• Drata
• Vanta

What we offer

• Competitive base salary (B/. 36,800 – 46,000 per year).
• Comprehensive benefits package.
• Opportunities to work on diverse client engagements in a supportive environment.