Senior GRC Analyst: AI-Driven Compliance & SOX Expert

Crusoe Energy Systems; San Francisco (CA); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

Health benefits

PTO

401(k) match

Mental wellness

Job summary

Crusoe Energy Systems in San Francisco seeks a Sr. GRC Analyst to own the day-to-day governance, risk, and compliance program, including SOX ICFR, audit evidence, and vendor risk, while driving security and privacy controls.

You will operate independently, manage full audit cycles, and partner with IT, Security, Finance, and Engineering to implement control improvements and evidence collection. Experience with AI-assisted tooling is valued.

Qualifications

• 5–7 years of experience in GRC, information security, or IT audit.
• SOX and ICFR understanding; able to drive end-to-end audits.
• Experience with SOC 2, ISO 27001, HIPAA, or NIST CSF.
• Strong communication and stakeholder management.

Responsibilities

• Own and drive day-to-day GRC program execution across security and privacy controls.
• Lead SOX ITGCs design, operation, and testing; maintain control docs.
• Coordinate audit cycles; respond to evidence requests and auditor inquiries.
• Modernize GRC processes with AI and automation to improve efficiency.

Skills

GRC experience

SOX knowledge

Audit management

Policy management

AI tools familiarity

Vendor risk

ITGCs

Customer questionnaires

UARs

Education

CISA

CRISC

CISSP

Tools

Vanta

Drata

AuditBoard

Job description

Crusoe Energy Systems in San Francisco seeks a Sr. GRC Analyst to own the day-to-day governance, risk, and compliance program, including SOX ICFR, audit evidence, and vendor risk, while driving security and privacy controls.

You will operate independently, manage full audit cycles, and partner with IT, Security, Finance, and Engineering to implement control improvements and evidence collection. Experience with AI-assisted tooling is valued.