GRC Compliance Auditor: SOC 2 & ISO 27001 Lead

NorthMark Strategies LLC; Dallas (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Lunch stipend

Employer-paid medical, dental, vision

16 weeks parental leave

Life insurance

Short- and long-term disability

401(k) match up to 6%

PPO optional benefits

25 days PTO + 12 holidays

Job summary

NorthMark Compute & Cloud (NMC2) in Dallas, TX is seeking a detail-oriented GRC Compliance Auditor to own SOC 2 Type II and ISO 27001 programs. You will administer the GRC platform, map controls, gather evidence, and coordinate audits across Engineering, IT, HR, Legal, and Operations.

You will drive automated evidence collection, prepare executive reports, and guide audit processes with stakeholders while communicating complex regulatory requirements clearly.

Qualifications

• Bachelor’s degree in information systems, CS or related field or equivalent experience.
• 4–8 years of hands-on GRC, IT audit, or information security compliance.
• Experience with SOC 2 Type II audits from readiness to coordination.
• Knowledge of ISO 27001/27002 and related audits.
• Experience administering a GRC platform (Vanta/Drata/Hyperproof/AuditBoard).
• Familiarity with IAM tooling (Entra ID, Okta) for evidence collection.
• Strong written and verbal communication for technical and non-technical audiences.

Responsibilities

• Lead internal audit cycles for SOC 2 Type II and ISO 27001; assess design and operating effectiveness of controls.
• Coordinate external audits end-to-end: scheduling, evidence packages, auditor requests, closure.
• Conduct readiness assessments and gap analyses; recommend prioritized remediation actions.
• Develop and maintain cross-framework control library mapping SOC 2, ISO 27001, NIST CSF.
• Administer GRC platform, configure frameworks, evidence integrations, risk registers, dashboards.
• Drive automated evidence collection via IdP/IGA integrations across systems.
• Produce executive reports and audit-readiness scorecards for leadership and board.
• Manage remediation of findings, exceptions, and third-party risk assessments.

Skills

SOC 2 Type II audits

ISO 27001 knowledge

GRC platform administration

Identity & access management tooling

Audit coordination

Regulatory mapping

Effective communication

Education

Bachelor’s degree in Information Systems, Computer Science, or related field

Tools

Vanta

Drata

Hyperproof

AuditBoard

Entra ID

Okta

Job description

NorthMark Compute & Cloud (NMC2) in Dallas, TX is seeking a detail-oriented GRC Compliance Auditor to own SOC 2 Type II and ISO 27001 programs. You will administer the GRC platform, map controls, gather evidence, and coordinate audits across Engineering, IT, HR, Legal, and Operations.

You will drive automated evidence collection, prepare executive reports, and guide audit processes with stakeholders while communicating complex regulatory requirements clearly.