Remote Senior GRC Analyst: Audit, Policy & Risk Lead

VulnU; Hoboken, Addison, Austin, Phoenix (NJ, TX, TX, AZ); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Semperis, a leading cybersecurity company, seeks a Senior GRC Analyst to own SOC/ISO/HIPAA audits, policy maintenance, and remediation tracking. You will manage customer security questionnaires and support FedRAMP efforts, collaborating with engineers and policy owners to ensure audit readiness.

You will back up vendor risk assessments and help expand the reusable evidence library using AI-assisted tools, driving improvements in GRC operations and governance.

Qualifications

• 5+ years of experience in GRC, information security risk, compliance, or IT audit.
• SOC 2 Type II and ISO 27001 audit experience.
• Clear written and verbal communication.
• Ability to influence with engineers and stakeholders.

Responsibilities

• Lead SOC/ISO/HIPAA audits and privacy programs.
• Maintain security policies aligned to NIST SP 800-53/CSF, ISO 27001, HIPAA, and SOC 2.
• Support FedRAMP program & other frameworks as needed.
• Answer customer security questionnaires at scale with AI-assisted tools.
• Administer the GRC platform (Vanta) and automate evidence collection.

Skills

GRC

InfoSec risk

Compliance

Audits

Vendor risk

Education

Cybersecurity degree

CISSP

CRISC

CISM

CISA

Tools

Vanta

Drata

OneTrust

Archer

ServiceNow

Job description

Semperis, a leading cybersecurity company, seeks a Senior GRC Analyst to own SOC/ISO/HIPAA audits, policy maintenance, and remediation tracking. You will manage customer security questionnaires and support FedRAMP efforts, collaborating with engineers and policy owners to ensure audit readiness.

You will back up vendor risk assessments and help expand the reusable evidence library using AI-assisted tools, driving improvements in GRC operations and governance.