Senior GRC Analyst

Crusoe; San Francisco (CA); On-site; USD 130,000 - 155,000; Full time

Benefits offered by this job

Equity

401(k) match

Health insurance

Dental insurance

Vision insurance

Paid time off

Professional development

Tuition reimbursement

Commuter benefits

Phone stipend

Global travel insurance

Meals allowance

Job summary

Crusoe is seeking a Sr. GRC Analyst to own the day-to-day governance, risk, and compliance program. You will manage ITGCs, audit evidence, and vendor risk while ensuring readiness for SOX, SOC 2, and ISO standards.

Reporting to the Head of GRC, you will drive policy improvements and customer trust. As a senior contributor, you’ll coordinate audits, update controls, leverage AI tools for efficiency, and collaborate with IT, Security, Finance, and Engineering to scale Crusoe’s compliance program

Qualifications

• 5-7 years of experience in GRC, information security, IT audit, or related
• Knowledge of SOC 2, ISO 27001, HIPAA, and NIST CSF
• SOX 404 and IT general controls experience
• Experience with UARs, vendor risk, and internal audits
• Experience responding to customer security questionnaires
• Comfort using AI tools to accelerate compliance work
• Strong written and verbal communication; able to translate requirements
• Organized, self-directed, and able to manage multiple priorities

Responsibilities

• Audit & controls: support ITGC design, operation, testing, and documentation; identify gaps and drive remediation with owners; gather audit evidence for SOX, SOC 2, ISO 27001, HIPAA; assist auditors; respond to requests.
• Compliance operations: coordinate User Access Reviews and keep security policies updated; conduct third-party security assessments.
• Customer trust: respond to customer questionnaires within SLAs; maintain Security Diligence Playbook.
• GRC platform & automation: enhance our GRC tool workflows; seek automation; apply AI for efficiency; report metrics to leadership.

Skills

SOX ITGCs

Audit cycles

GRC platforms

Vendor risk assessments

Customer security questionnaires

AI tools for compliance

Technical communication

Stakeholder management

Detail-oriented

Tools

Vanta

Drata

AuditBoard

Job description

Crusoe is on a mission to accelerate the abundance of energy and intelligence. As the only vertically integrated AI infrastructure company built from the ground up, we own and operate each layer of the stack - from electrons to tokens - to power the world's most ambitious AI workloads. When you join Crusoe, you join a team that is building the future, faster.

We're in the midst of the greatest industrial revolution of our time. The demand for AI compute is boundless, and power is a bottleneck. We're solving that - with an energy-first approach that makes AI infrastructure better for the world and faster for the people innovating with AI.

We're looking for problem-solving, opportunity-finding teammates with a sense of urgency, who believe in the scale of our ambition and thrive on a path not fully paved - people who want to grow their careers alongside a team of experts across energy, manufacturing, data center construction, and cloud services.

If you want to do the most meaningful work of your career, help our customers and partners advance their AI strategies, and be part of a high-performing team that believes in each other, come build with us at Crusoe.

About the Role:

Crusoe is seeking a Sr. GRC Analyst to own and drive the day-to-day execution of our Governance, Risk, and Compliance program. Reporting to the Head of GRC, this role is responsible for running core compliance operations across our security and privacy frameworks, from user access reviews and audit evidence to customer trust support and vendor risk, while also bringing SOX expertise to the IT controls that underpin our internal controls over financial reporting (ICFR), from gap identification through remediation.

You'll be the engine behind our continuous compliance posture: keeping audits on track, maintaining policies and standards, responding to customer security inquiries, and driving improvements across our GRC platform. As a senior member of the team, you'll be expected to operate independently, take ownership of full audit cycles, and partner confidently with stakeholders across IT, Security, Finance, and Engineering. The ideal candidate is proactive, detail-oriented, and brings a mindset for efficiency, leveraging AI tools and automation to reduce manual effort and scale their impact across the program.

What You'll Be Working On:

Audit & Controls

• Applying expertise in SOX audit requirements to support the design, operation, and testing of IT general controls (ITGCs), including access management, change management, and computer operations, and maintaining the related control documentation, process narratives, and risk-control matrices
• Evaluating in-scope systems and processes to identify SOX control gaps, and partnering closely with control owners across IT, Finance, and Engineering to design and drive remediation plans with clear ownership and timelines through to closure
• Collecting, organizing, and delivering audit evidence for SOX, SOC 2, ISO 27001, HIPAA, and other framework requirements
• Partnering with internal control owners to ensure evidence is accurate, current, and audit-ready
• Acting as a day-to-day point of contact for internal and external auditors, managing requests and facilitating walkthroughs
• Responding to evidence and documentation requests for various strategic initiatives

Compliance Operations

• Owning the coordination and completion of User Access Reviews (UARs) across in-scope systems and applications on a recurring schedule, including those supporting financial reporting
• Maintaining and updating organizational security policies and standards to reflect current regulatory and business requirements
• Conducting third-party security assessments and supporting review of vendor contracts for compliance with security requirements

Customer Trust

• Responding to customer security questionnaires and due diligence requests within established SLAs
• Maintaining and updating the Security Diligence Playbook to ensure responses are consistent, accurate, and efficient

GRC Platform & Automation

• Driving enhancements within our GRC tool, including asset management, integrations, test configurations, control mapping, review workflows, and risk objects
• Identifying opportunities to streamline and automate repetitive GRC workflows, including continuous control monitoring
• Applying AI and LLM-based tools to improve productivity across compliance operations, such as accelerating questionnaire responses, summarizing audit evidence, or drafting policy updates
• Tracking and reporting on compliance metrics and control health to GRC leadership

What You'll Bring to the Team:

• 5-7 years of experience in GRC, information security, IT audit, or a related compliance role, with demonstrated ownership of end-to-end audit cycles
• Practical knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF
• Solid understanding of SOX 404 audit requirements and IT general controls, with hands-on experience identifying control gaps and working with stakeholders to remediate them
• Hands-on experience with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar also valued)
• Experience conducting user access reviews, vendor risk assessments, and internal audits
• Familiarity with responding to customer security questionnaires and managing trust center content
• Comfort using AI tools (e.g., Gemini, Claude, Copilot) to accelerate day-to-day work and improve operational efficiency
• Strong written and verbal communication skills with the ability to translate compliance requirements for both technical and non-technical audiences; skilled at influencing control owners without direct authority
• Highly organized, self-directed, and able to manage multiple priorities and stakeholders independently
• Detail-oriented with strong follow-through on recurring operational tasks

Bonus Points

• Certifications such as CISA, CRISC, CISSP, Security+, or ISO 27001 Lead Auditor
• Background from public accounting and/or high-growth technology companies navigating SOX compliance
• Experience with cloud environments (GCP preferred; AWS/Azure exposure helpful)
• Familiarity with financial systems (ERP, billing, or revenue recognition platforms)
• Experience with policy management and security awareness training platforms
• Familiarity with AI risk assessment frameworks and emerging AI governance practices
• Experience mentoring junior analysts or leading cross-functional compliance initiatives

Benefits

• Competitive compensation and equity packages
• Restricted Stock Units
• Paid time off, paid holidays & leave of absence programs
• Comprehensive health, dental & vision insurance
• Employer contributions to HSA account
• Paid parental leave
• Paid life insurance, short-term and long-term disability
• Professional development & tuition reimbursement
• Mental health & wellness support
• Commuter benefits (parking & transit)
• Cell phone stipend
• 401(k) Retirement plan with company match up to 4% of salary
• Volunteer time off
• Global travel insurance & emergency assistance
• Daily meals allowance
• Additional perks & programs specific to location

Compensation Range

Compensation will be paid in the range of up to $130,000 - $155,000 + Bonus. Restricted Stock Units are included in all offers. Compensation to be determined by the applicant's knowledge, education, and abilities, as well as internal equity and alignment with market data.

Crusoe is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.