Senior GRC Analyst: Audit, Policy & Risk Lead

Semperis; Hoboken (NJ); Ibrido; USD 120.000 - 170.000; Tempo pieno

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to lead SOC2 Type II and ISO 27001 audits, maintain security policies, and manage customer questionnaires. You will collaborate with engineering and product teams to ensure controls are effective and auditable.

In this hybrid role, you will back up vendor risk, remediation tracking, and Trust Center activities while driving continuous improvement using AI-assisted tooling.

Competenze

• 5+ years of experience in GRC, information security risk, compliance, or IT audit at a SaaS company.
• A degree in Cybersecurity or certifications: CISSP, CRISC, CISM, or CISA.
• SOC 2 Type II and ISO 27001 audit experience.
• Ability to explain technical control details to engineers and business owners.
• Proven track record of influencing cross-functional teams.

Mansioni

• Own SOC2 Type II and ISO 27001 audits and policy upkeep.
• Lead customer security questionnaires and due diligence requests.
• Drive remediation timelines with engineering for audit findings.
• Maintain policy updates aligned with NIST, ISO, HIPAA, and SOC 2.
• Back up vendor risk assessments and trust center activities.

Conoscenze

GRC

ISO 27001

SOC 2

FedRAMP

NIST 800-53

Formazione

Cybersecurity degree

CISSP/CRISC/CISM/CISA

Strumenti

Vanta

OneTrust

Drata

ServiceNow

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to lead SOC2 Type II and ISO 27001 audits, maintain security policies, and manage customer questionnaires. You will collaborate with engineering and product teams to ensure controls are effective and auditable.

In this hybrid role, you will back up vendor risk, remediation tracking, and Trust Center activities while driving continuous improvement using AI-assisted tooling.