Senior GRC Analyst I – SOC 2

About the role

The Senior GRC Analyst I will lead SOC 2 engagements, ensuring client satisfaction and efficient execution of audit plans. The role combines hands‑on testing of IT controls with advisory coaching for team members.

Key responsibilities

• Lead and conduct external SOC 2 audits, evaluating security, availability, processing integrity and related business processes.
• Review, document, test both manual and automated controls across platforms such as Drata and Vanta.
• Assess client IT and security risks, recommend control improvements, and support internal and external security assessments.
• Develop strong client relationships by understanding their technology environments and communicating audit findings clearly.

Required profile

• Bachelor’s degree and at least 3 years of IT audit or audit experience.
• Proven experience leading SOC 2 audits and familiarity with readiness platforms (e.g., Drata, Vanta).
• Professional certifications such as CISA, CISSP, or CIPP are a plus.
• Strong written and spoken English communication skills.

Required skills

• SOC 2 audit methodology
• Drata platform
• Vanta platform
• IT control testing
• CISA certification
• CISSP certification
• CIPP certification

What we offer

• Competitive base salary $36,800‑$46,000 per year.
• Comprehensive health coverage, life and disability insurance.
• Generous paid time off, flexible work arrangements and hybrid/remote options.
• Performance‑based bonuses, tuition reimbursement and professional development opportunities.