Senior GRC Analyst – SOC 2

About the role

The Senior GRC Analyst I focuses on SOC 2 engagements, ensuring client satisfaction while leading audit execution and coaching team members. This role combines deep technical knowledge of IT controls with strong advisory skills to support clients across security, availability, processing integrity and related business processes.

Key responsibilities

• Lead and conduct detailed external audits of clients' business processes and IT controls to achieve SOC 2 compliance.
• Observe, review, document, and test key transactions, access controls, change management, and automated controls.
• Evaluate and test application controls across a wide range of systems and software applications.
• Identify business, IT, and security risks, recommending control measures and process improvements.
• Assess security policies, risk management documentation, and infrastructure components.
• Support internal and external security assessments for new and existing services.
• Develop and nurture strong client relationships to understand their risk and compliance needs.

Required profile

• Bachelor’s degree required.
• 3+ years of IT audit or general audit experience.
• Proven experience leading SOC 2 audits.
• Experience reviewing and advising on IT controls.
• Teaching, training, or mentoring experience preferred.
• Professional certifications such as CISA, CISSP, CIPP are a plus.

Required skills

• SOC 2 audit execution.
• IT audit and controls testing.
• Risk assessment and mitigation.
• Familiarity with SOC 2 readiness platforms (e.g., Drata, Vanta).

What we offer

• Competitive base salary ranging from B/.36,800 to B/.46,000 per year.
• Comprehensive benefits package.