GRC Security Analyst — ISO 27001 & SOC 2 Focus

Cognism Limited; United States; Remote; USD 70,000 - 110,000; Full time

Job summary

Cognism is seeking a GRC Analyst to help mature governance, risk and compliance in a fast-growing data platform. You will own evidence, monitoring, and risk-based prioritisation across ISO 27001 and SOC 2, partnering with Engineering, IT Operations, and Compliance.

The role offers an opportunity to strengthen audit readiness, document controls, and support vendor assessments while building AI risk awareness. Experience with security controls, risk registers, and policy maintenance is preferred.

Qualifications

• 1–2 years experience in security, GRC, IT audit, or related risk function.
• Familiar with ISO 27001 and SOC 2 fundamentals.
• Detail-oriented with strong written and verbal communication.
• Ability to explain risk concepts to technical and non-technical audiences.
• Comfortable collaborating with Engineering, IT Operations, and Compliance teams.
• Curious about AI risks and compliance applications.

Responsibilities

• Support day-to-day GRC programme operations.
• Maintain and improve documentation: policies, risk registers, control mappings.
• Support audits, questionnaires, vendor risk assessments.
• Track remediation closure with cross-functional teams.
• Identify process improvements for efficiency and automation.

Skills

GRC

ISO 27001

SOC 2

IT audit

Job description

Cognism is seeking a GRC Analyst to help mature governance, risk and compliance in a fast-growing data platform. You will own evidence, monitoring, and risk-based prioritisation across ISO 27001 and SOC 2, partnering with Engineering, IT Operations, and Compliance.

The role offers an opportunity to strengthen audit readiness, document controls, and support vendor assessments while building AI risk awareness. Experience with security controls, risk registers, and policy maintenance is preferred.