Cyber GRC Analyst: Training & Audit Champion

Semperis; Dallas (TX); Hybrid; USD 70,000 - 110,000; Full time

Job summary

Semperis seeks a Cybersecurity GRC Analyst in Dallas, TX to support governance, risk, and compliance activities. You will own the annual security awareness training program, respond to customer security questionnaires, and assist with FedRAMP, SOC 2, and ISO 27001 efforts.

You will gather audit evidence, coordinate policy updates, and help automate evidence collection using Vanta and other GRC tools. A strong communicator with IT security experience will thrive in this collaborative,

Qualifications

• 6+ months of experience in a GRC role.
• Certification or degree in Cybersecurity or related field.
• Strong organization and ability to meet deadlines.
• Clear written and verbal communication skills.
• Proficient with Microsoft 365, Excel, and AI-assisted tools.

Responsibilities

• Lead the annual Security and Compliance Training campaign with People Ops and Legal.
• Answer customer security questionnaires and maintain Trust Center content.
• Support FedRAMP ISSO and assist SOC 2 / ISO 27001 audits as needed.
• Gather and organize audit evidence for audits and prepare for reviewers.
• Coordinate security policy updates and document version history.
• Support vendor risk with annual recertification tracking.
• Assist with cyber risk register administration and automate tasks in Vanta.

Skills

Organization & detail-oriented

Written & verbal communication

Microsoft 365

Excel

AI-assisted tools

Education

Cybersecurity degree

CISA certification

CRISC certification

CISSP certification

Tools

Vanta

GRC tooling

Job description

Semperis seeks a Cybersecurity GRC Analyst in Dallas, TX to support governance, risk, and compliance activities. You will own the annual security awareness training program, respond to customer security questionnaires, and assist with FedRAMP, SOC 2, and ISO 27001 efforts.

You will gather audit evidence, coordinate policy updates, and help automate evidence collection using Vanta and other GRC tools. A strong communicator with IT security experience will thrive in this collaborative,