Senior GRC Analyst: AI-Driven Compliance Leader

Crusoe; San Francisco (CA); On-site; USD 130,000 - 155,000; Full time

Benefits offered by this job

Equity

401(k) match

Health insurance

Dental insurance

Vision insurance

Paid time off

Professional development

Tuition reimbursement

Commuter benefits

Phone stipend

Global travel insurance

Meals allowance

Job summary

Crusoe is seeking a Sr. GRC Analyst to own the day-to-day governance, risk, and compliance program. You will manage ITGCs, audit evidence, and vendor risk while ensuring readiness for SOX, SOC 2, and ISO standards.

Reporting to the Head of GRC, you will drive policy improvements and customer trust. As a senior contributor, you’ll coordinate audits, update controls, leverage AI tools for efficiency, and collaborate with IT, Security, Finance, and Engineering to scale Crusoe’s compliance program

Qualifications

• 5-7 years of experience in GRC, information security, IT audit, or related
• Knowledge of SOC 2, ISO 27001, HIPAA, and NIST CSF
• SOX 404 and IT general controls experience
• Experience with UARs, vendor risk, and internal audits
• Experience responding to customer security questionnaires
• Comfort using AI tools to accelerate compliance work
• Strong written and verbal communication; able to translate requirements
• Organized, self-directed, and able to manage multiple priorities

Responsibilities

• Audit & controls: support ITGC design, operation, testing, and documentation; identify gaps and drive remediation with owners; gather audit evidence for SOX, SOC 2, ISO 27001, HIPAA; assist auditors; respond to requests.
• Compliance operations: coordinate User Access Reviews and keep security policies updated; conduct third-party security assessments.
• Customer trust: respond to customer questionnaires within SLAs; maintain Security Diligence Playbook.
• GRC platform & automation: enhance our GRC tool workflows; seek automation; apply AI for efficiency; report metrics to leadership.

Skills

SOX ITGCs

Audit cycles

GRC platforms

Vendor risk assessments

Customer security questionnaires

AI tools for compliance

Technical communication

Stakeholder management

Detail-oriented

Tools

Vanta

Drata

AuditBoard

Job description

Crusoe is seeking a Sr. GRC Analyst to own the day-to-day governance, risk, and compliance program. You will manage ITGCs, audit evidence, and vendor risk while ensuring readiness for SOX, SOC 2, and ISO standards.

Reporting to the Head of GRC, you will drive policy improvements and customer trust. As a senior contributor, you’ll coordinate audits, update controls, leverage AI tools for efficiency, and collaborate with IT, Security, Finance, and Engineering to scale Crusoe’s compliance program