GRC Analyst I, SOC 2

Sensiba LLP; United States; On-site; USD 49,000 - 79,000; Full time

Benefits offered by this job

Leave entitlements

Pension scheme

Flexible remote work

Performance bonus

Professional development

Tech setup

Job summary

Sensiba LLP is seeking a GRC Analyst I to support SOC 2, HIPAA, ISO 27001 engagements. You will help evaluate governance, risk management, and internal controls, and assist in developing remediation recommendations while working with clients to implement scalable compliance programs.

The role emphasizes strong analytical skills, collaboration with client teams, and stewarding compliance across multiple frameworks in a remote-friendly, flexible environment.

Qualifications

• Experience supporting SOC 2, HIPAA, ISO 27001 engagements.
• Ability to evaluate governance, risk management, and controls.
• Strong analytical skills and interest in risk management.
• Ability to document policies and procedures.

Responsibilities

• Assist in the execution of SOC 2 examinations, readiness assessments, HIPAA engagements, and other compliance-related projects.
• Observe, document, and test controls related to risk management, vendor management, security awareness, HR processes, physical security, asset management, business continuity, and policy governance.
• Review organizational policies, procedures, and supporting documentation.
• Evaluate control design and operating effectiveness.
• Assess compliance with applicable frameworks and industry requirements.
• Document business processes and control activities.
• Identify control deficiencies, risks, and improvement opportunities.
• Assist in the development of remediation recommendations.
• Support readiness assessments and compliance gap analyses.
• Perform walkthroughs with client personnel to understand business operations and compliance processes.
• Build and maintain strong client relationships.
• Communicate findings and recommendations professionally.
• Collaborate effectively with engagement teams and client stakeholders.
• Assist clients in understanding compliance requirements and best practices.

Skills

Risk management

Internal controls

Compliance frameworks

Business process documentation

Communication

Organizational skills

Attention to detail

Third-party risk management

Education

Bachelor's degree

CRISC

CISA

ISC2 CC

Internal Audit certifications

Tools

Third-party risk management

Job description

GRC Analyst I, SOC 2

Department: Governance, Risk & Compliance

Employment Type: Full Time

Location: Ireland

Reporting To: Rebecca Barry

Description

The GRC Analyst I supports clients undergoing SOC 2, HIPAA, ISO 27001, and related compliance engagements. This role focuses on evaluating governance, risk management, business processes, and operational controls that support compliance objectives.

The ideal candidate possesses strong analytical skills, an interest in risk management and internal controls, and a desire to help organizations build scalable compliance programs.

Key Responsibilities

• Assist in the execution of SOC 2 examinations, readiness assessments, HIPAA engagements, and other compliance-related projects.
• Observe, document, and test controls related to:
  • Risk Management
  • Vendor Management
  • Security Awareness Training
  • Human Resources Processes
  • Physical Security
  • Asset Management
  • Business Continuity
  • Policy Governance
• Review organizational policies, procedures, and supporting documentation.
• Evaluate control design and operating effectiveness.
• Assess compliance with applicable frameworks and industry requirements.
• Document business processes and control activities.
• Identify control deficiencies, risks, and improvement opportunities.
• Assist in the development of remediation recommendations.
• Support readiness assessments and compliance gap analyses.
• Perform walkthroughs with client personnel to understand business operations and compliance processes.
• Build and maintain strong client relationships.
• Communicate findings and recommendations professionally.
• Collaborate effectively with engagement teams and client stakeholders.
• Assist clients in understanding compliance requirements and best practices.

Skills, Knowledge and Expertise

• Risk management
• Internal controls
• Compliance frameworks
• Business process documentation
• Strong communication and organizational skills.
• Strong attention to detail and documentation abilities.

• SOC 2
• HIPAA
• ISO 27001
• Third-party risk management

• Bachelor's degree in Accounting, Risk Management, Business Administration, Information Systems, Cybersecurity, or related field.
• CRISC
• CISA
• ISC2 CC
• Internal Audit certifications

Compensation & Benefits

There are many reasons to join the Sensiba team: market-leading leave entitlements, competitive compensation, professional advancement opportunities, and above all - our people. If you're looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work,

• Market-Leading Annual Leave - We offer 30 days of paid annual leave (10 days above the Irish statutory minimum), plus an additional 5 days of paid leave for our firm's mid-year shutdown in July. You will also have access to personal/carer's leave, parental leave, and volunteer days.
• Pension Scheme - Plan for your future with our company-supported pension program.
• Flexible & Remote Work - We are a remote-first firm. Enjoy the flexibility of working from home, with WeWork subscriptions and access to local office hubs available for those who value face-to-face collaboration.
• Performance-Based Bonus - Recognition for your contributions through our annual discretionary bonus program.
• Professional Development - We invest in your expertise through tuition reimbursement, support for professional certifications (ACA, ACCA, CPA etc.), and dedicated mentorship.
• Tech of Your Choice - We offer your choice of a high-spec Mac or PC setup.
• Inclusive & Supportive Culture - DEI initiatives, employee resource groups, and comprehensive wellness programs.