Senior GRC Analyst: Client-Facing Compliance

Solifi; Milton Keynes; On-site; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Private medical insurance

Auto enrolment pension scheme

Cycle to work scheme

Group Life Insurance

Group Income Protection Insurance

Free on-site parking (Milton Keynes)

Job summary

Solifi is seeking a Senior Compliance Analyst to join the GRC team in Milton Keynes. You will own a defined set of policies and risk areas, lead complex client audits, DDQs, and security questionnaires, and mentor junior analysts while coordinating with clients and external auditors.

You will maintain control mappings and the Drata evidence library, apply AI-assisted drafting with careful review, and drive remediation strategies to ensure continuous compliance in SOC 2 Type II activities.

Qualifications

• 5+ years in IT audit, compliance, or GRC.
• Direct experience responding to client audits, DDQs, or security questionnaires.
• Comfortable being client-facing with clients/auditors.
• Hands-on Drata experience (or Vanta/Secureframe) as system of record.
• Excellent written communication under time pressure.
• Working knowledge of SOC2, ISO 27001 or NIST CSF.

Responsibilities

• Lead complex client audits, DDQs, and security questionnaires.
• Own defined control areas within the SOC2 Type II cycle.
• Maintain and improve evidence library in Drata.
• Mentor junior Analysts on governance discipline.
• Represent Solifi to clients and external auditors.
• Assist with vendor risk tiering for high-risk relationships.
• Apply AI-assisted drafting with careful review.
• Support governance cadences and risk register reviews.

Skills

IT audit

GRC

SOC2

Policy lifecycle

Risk register

Control mapping

Client-facing

Drata

Education

Bachelor's degree

CISA

CISSP

Tools

Drata

Vanta

Secureframe

Job description

Solifi is seeking a Senior Compliance Analyst to join the GRC team in Milton Keynes. You will own a defined set of policies and risk areas, lead complex client audits, DDQs, and security questionnaires, and mentor junior analysts while coordinating with clients and external auditors.

You will maintain control mappings and the Drata evidence library, apply AI-assisted drafting with careful review, and drive remediation strategies to ensure continuous compliance in SOC 2 Type II activities.