GRC Compliance Auditor

NorthMark Strategies LLC; Dallas (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Lunch stipend

Employer-paid medical, dental, vision

16 weeks parental leave

Life insurance

Short- and long-term disability

401(k) match up to 6%

PPO optional benefits

25 days PTO + 12 holidays

Job summary

NorthMark Compute & Cloud (NMC2) in Dallas, TX is seeking a detail-oriented GRC Compliance Auditor to own SOC 2 Type II and ISO 27001 programs. You will administer the GRC platform, map controls, gather evidence, and coordinate audits across Engineering, IT, HR, Legal, and Operations.

You will drive automated evidence collection, prepare executive reports, and guide audit processes with stakeholders while communicating complex regulatory requirements clearly.

Qualifications

• Bachelor’s degree in information systems, CS or related field or equivalent experience.
• 4–8 years of hands-on GRC, IT audit, or information security compliance.
• Experience with SOC 2 Type II audits from readiness to coordination.
• Knowledge of ISO 27001/27002 and related audits.
• Experience administering a GRC platform (Vanta/Drata/Hyperproof/AuditBoard).
• Familiarity with IAM tooling (Entra ID, Okta) for evidence collection.
• Strong written and verbal communication for technical and non-technical audiences.

Responsibilities

• Lead internal audit cycles for SOC 2 Type II and ISO 27001; assess design and operating effectiveness of controls.
• Coordinate external audits end-to-end: scheduling, evidence packages, auditor requests, closure.
• Conduct readiness assessments and gap analyses; recommend prioritized remediation actions.
• Develop and maintain cross-framework control library mapping SOC 2, ISO 27001, NIST CSF.
• Administer GRC platform, configure frameworks, evidence integrations, risk registers, dashboards.
• Drive automated evidence collection via IdP/IGA integrations across systems.
• Produce executive reports and audit-readiness scorecards for leadership and board.
• Manage remediation of findings, exceptions, and third-party risk assessments.

Skills

SOC 2 Type II audits

ISO 27001 knowledge

GRC platform administration

Identity & access management tooling

Audit coordination

Regulatory mapping

Effective communication

Education

Bachelor’s degree in Information Systems, Computer Science, or related field

Tools

Vanta

Drata

Hyperproof

AuditBoard

Entra ID

Okta

Job description

GRC Compliance Auditor### GRC Compliance AuditorApply: Dallas TX: Full time: Posted 5 Days Ago: R13278**THE COMPANY**NorthMark Compute & Cloud (NMC2) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients’ research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.**THE POSITION**NMC2 is looking for a detail-oriented GRC Compliance Auditor to join the Information Security team, reporting to the GRC & Privacy Manager and based at our Dallas, TX offices at Victory Commons. This role owns the day-to-day execution of NMC2’s SOC 2 Type II and ISO 27001 compliance programmes — from readiness assessments and control mapping through to evidence collection and external audit coordination.You will serve as the primary administrator of our GRC platform, maintaining the control framework library, driving automated evidence collection, and producing compliance posture reporting for leadership. You will work closely with control owners across Engineering, IT, HR, Legal, and Operations — translating regulatory requirements into practical controls and embedding audit readiness into how teams operate day to day.The right candidate brings deep hands-on experience with SOC 2 and ISO 27001, a sharp eye for control gaps, and the communication skills to guide both technical and non-technical stakeholders through audit processes without disrupting the business.**RESPONSIBILITIES*** Lead internal audit cycles for SOC 2 Type II and ISO 27001, assessing the design and operating effectiveness of controls and identifying deficiencies for remediation.* Coordinate external audits end-to-end — scheduling walkthroughs, preparing evidence packages, managing auditor requests, and tracking findings through to validated closure.* Conduct readiness assessments and gap analyses across compliance frameworks, recommending remediation actions prioritized by risk and business impact.* Develop and maintain a cross-framework control library mapping SOC 2 TSC, ISO 27001 Annex A, NIST CSF, and other applicable standards to NMC2’s operational controls.* Serve as the primary administrator of the GRC and compliance automation platform — configuring control frameworks, evidence integrations, risk registers, and compliance dashboards.* Drive adoption of automated evidence collection via integrations with IdP, IGA, HR, and infrastructure systems to reduce manual audit overhead across the business.* Produce executive-ready compliance posture reports, control health metrics, and audit-readiness scorecards for leadership and board-level stakeholders.* Manage and track remediation of audit findings, exceptions, and risk acceptances, and conduct vendor and third-party risk assessments against SOC 2 and ISO 27001 requirements.* Develop audit readiness training, control owner guides, and playbooks to embed compliance awareness into day-to-day operations across Engineering, Product, and Operations teams.* Respond to customer security questionnaires and due diligence requests relating to audit certifications and NMC2’s compliance posture.**REQUIREMENTS*** Bachelor’s degree in Information Systems, Computer Science, Business Administration, or a related field — or equivalent experience.* 4–8 years of hands-on experience in GRC, IT audit, or information security compliance.* Demonstrated experience conducting or supporting SOC 2 Type II audits, including evidence collection, control testing, and auditor coordination.* Working knowledge of ISO 27001 / 27002 requirements, with experience supporting certification or surveillance audits.* Hands-on experience administering a GRC or compliance automation platform such as Vanta, Drata, Hyperproof, AuditBoard, or equivalent.* Ability to translate complex regulatory requirements into practical, implementable controls and evidence procedures.* Familiarity with identity and access management tooling (Entra ID, Okta, or equivalent) in the context of access reviews and compliance evidence.* Experience working with control owners across Engineering, IT, Legal, HR, and Operations to define and validate control procedures.* Strong written and verbal communication skills; comfortable presenting compliance findings to both technical and non-technical audiences.* One or more relevant certifications preferred: CISA, ISO 27001 Lead Auditor or Lead Implementer, CISM, CISSP, or CRISC.*It is impossible to list every requirement for, or responsibility of, any position. Similarly, we cannot identify all the skills a position may require since job responsibilities and the Company’s needs may change over time. Therefore, the above job description is not comprehensive or exhaustive. The Company reserves the right to adjust, add to or eliminate any aspect of the above description. The Company also retains the right to require all employees to undertake additional or different job responsibilities when necessary to meet business needs.***Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.****Benefits & Perks:*** **Company-Paid Lunch Stipend**: Lunch is provided via GrubHub* **Company-Paid Benefits:** 100% Employer-Paid Medical in our High Deductible Health Plan, Dental and Vision benefits for employees and their families, 16 weeks of Paid Parental Leave, Employee Assistance Program, Life insurance, Short-Term Disability and Long-Term Disability* **401(k):** Company will match 100% of your contributions up to 6%* **Optional Employee-Paid Benefits:** Medical insurance in our PPO plan and a variety of other benefits such as Health Savings Accounts (with Company Contribution!), Flexible Spending Accounts, Supplemental Life Insurance, Wellhub and more.* **Time Off:** 25 days of Paid Time Off plus 12 company holidays**EQUAL OPPORTUNITY EMPLOYER**NORTHMARK STRATEGIES LLC IS AN EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER. THE COMPANY'S POLICY IS NOT TO DISCRIMINATE AGAINST ANY APPLICANT OR EMPLOYEE BASED ON RACE, COLOR, RELIGION, NATIONAL ORIGIN, GENDER, AGE, SEXUAL ORIENTATION, GENDER IDENTITY OR EXPRESSION, MARITAL STATUS, MENTAL OR PHYSICAL DISABILITY, AND GENETIC INFORMATION, OR ANY OTHER BASIS PROTECTED BY APPLICABLE LAW. THE FIRM ALSO PROHIBITS HARASSMENT OF APPLICANTS OR EMPLOYEES BASED ON ANY OF THESE PROTECTED CATEGORIES.NorthMark Strategies is a leading strategic capital firm, combining capital, innovation, and engineering to drive long-term value. From operating complex businesses to backing breakthrough technologies, our mission is to deploy capital and build enduring businesses. Our team combines intelligent risk-taking, operational excellence, exceptional talent, and world-class computing capacity to create shareholder value.Our company offers a dynamic environment where individuals have the freedom to lead companies toward bold achievements by embracing innovation, leveraging technology, and fostering differentiated business strategies. Our values are Integrity, Ability, and Energy, and the company aims to hire individuals who possess those qualities.At NorthMark Strategies, we believe the future isn’t something to hope for, it’s something to build. We don’t just invest, we create. Bringing together strategic insight and technical horsepower to deliver outcomes that endure.