Senior GRC Analyst: Audit, Policy & Compliance Lead

Semperis; Dallas (TX); Ibrido; USD 110.000 - 160.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work model

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to own SOC 2 Type II and ISO 27001 audits, and to manage customer security questionnaires and policy updates. The role collaborates with engineering, legal, and product teams to ensure evidence, timelines, and risk remediation are handled efficiently.

You will back up vendor risk and contribute to a growing, security-conscious culture. The ideal candidate has 5+ years in GRC within a SaaS setting, holds cybersecurity credentials, and excels at influencing

Competenze

• 5+ years in GRC, information security risk, compliance, or IT audit at a SaaS company.
• CISSP, CRISC, CISM, or CISA certifications are preferred.
• SOC 2 Type II and ISO 27001 audit/attestation experience.
• Able to explain technical control details to engineers and stakeholders.
• Proven track record of influencing cross-functional teams to get results.

Mansioni

• Own SOC2 Type II and ISO 27001 audit activities with Head of Risk and Compliance guidance.
• Lead creation and maintenance of customer security questionnaires and due diligence responses.
• Maintain and improve the reusable answer library using AI-assisted and manual processes.
• Manage remediation timelines with engineering for audit findings and oversee policy upkeep.

Conoscenze

Clear communication

Influence without authority

GRC experience

Audit coordination

Formazione

Cybersecurity degree

CISSP

CRISC

CISM

CISA

Strumenti

Vanta

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to own SOC 2 Type II and ISO 27001 audits, and to manage customer security questionnaires and policy updates. The role collaborates with engineering, legal, and product teams to ensure evidence, timelines, and risk remediation are handled efficiently.

You will back up vendor risk and contribute to a growing, security-conscious culture. The ideal candidate has 5+ years in GRC within a SaaS setting, holds cybersecurity credentials, and excels at influencing