GRC Compliance Auditor: SOC 2 & ISO 27001 Lead

NMC2; Dallas (TX); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Lunch stipend

Employer-paid medical, dental and eye

16 weeks Paid Parental Leave

Life insurance

Long-term disability

401(k) match

Paid time off 25 days + 12 holidays

Job summary

NorthMark Compute & Cloud (NMC²) is seeking a detail-oriented GRC Compliance Auditor to join the Information Security team in Dallas, TX. This role drives SOC 2 Type II and ISO 27001 readiness, control mapping, and evidence collection, coordinating audits withEngineering, IT, HR, Legal, and Operations.

You will administer the GRC platform, translate regulatory requirements into practical controls, and guide stakeholders through audit processes without business disruption.

Qualifications

• 4–8 years of hands-on GRC, IT audit, or information security compliance experience.
• Demonstrated experience with SOC 2 Type II audits, including evidence collection and auditor coordination.
• Working knowledge of ISO 27001/27002 requirements and support for audits.
• Hands-on experience administering a GRC platform such as Vanta, Drata, Hyperproof, or AuditBoard.
• Familiarity with identity/access management tooling (Entra ID, Okta) in compliance evidence contexts.
• Ability to translate regulatory requirements into practical controls and evidence procedures.
• Relevant certifications preferred: CISA, ISO 27001 Lead Auditor/Lead Implementer, CISM, CISSP, or CRISC.

Responsibilities

• Lead internal audit cycles for SOC 2 Type II and ISO 27001, assessing control design and operating effectiveness.
• Coordinate external audits end-to-end and track findings to closure.
• Conduct readiness assessments and gap analyses across compliance frameworks.
• Develop cross-framework control library mapping SOC 2 TSC, ISO 27001 Annex A, and NIST CSF.
• Administer the GRC platform—configuring frameworks, evidence integrations, risk registers, and dashboards.
• Drive automated evidence collection via IdP, IGA, HR, and infrastructure systems.
• Produce executive-ready compliance posture reports and audit-readiness scorecards.
• Manage remediation of audit findings and third-party risk assessments.
• Develop audit readiness training, control owner guides, and playbooks.
• Respond to customer security questionnaires and due diligence requests.

Skills

GRC

IT audit

Info security

SOC 2

ISO 27001

GRC platform

Education

Bachelor’s degree in Information Systems, Computer Science, Business Administration, or related

Tools

Vanta

Drata

Hyperproof

AuditBoard

Job description

NorthMark Compute & Cloud (NMC²) is seeking a detail-oriented GRC Compliance Auditor to join the Information Security team in Dallas, TX. This role drives SOC 2 Type II and ISO 27001 readiness, control mapping, and evidence collection, coordinating audits withEngineering, IT, HR, Legal, and Operations.

You will administer the GRC platform, translate regulatory requirements into practical controls, and guide stakeholders through audit processes without business disruption.