Senior GRC Analyst I, SOC 2

Sensiba LLP; United States; Sur place; USD 37 000 - 46 000; Plein temps

Avantages offerts par ce poste

Health Coverage

Paid Time Off

Flexible Work Arrangements

Performance Bonus

Professional Development

Career Growth

DEI & Wellness

Résumé du poste

Sensiba LLP is seeking a Senior GRC Analyst I, SOC 2 to lead external audits of clients' IT controls, focusing on security, availability, processing integrity, and access management. The role spans platform-enabled and traditional audit environments, requiring both automated and manual evidence collection.

You will coach and advise team members, develop client relationships, and communicate findings and recommendations to stakeholders. Candidates with SOC 2 readiness experience are preferred.

Qualifications

• Bachelor’s degree required.
• 3+ years IT Audit experience or Audit experience.
• Experience leading SOC 2 audits.
• Experience with controls reviews and advising on IT controls.
• Experience teaching, training, mentoring other staff is preferred.
• CISA/CISSP/CIPP etc. is a plus.
• Experience with SOC 2 readiness platforms (Drata, Vanta) preferred.

Responsabilités

• Lead and conduct detailed external audits of clients' business processes and IT controls, ensuring compliance with standards.
• Observe, review, document, and test key controls and transactions across engagements.
• Review and test application controls across systems and processes.
• Evaluate risks and recommend control measures and improvements.
• Assess security policies and risk documentation for client environments.
• Support security assessments of services and infrastructure.
• Develop relationships with clients and communicate audit findings.

Connaissances

SOC 2 audits

IT Audit

Controls reviews

Mentoring

Drata

Vanta

Formation

Bachelor’s degree

Outils

Drata

Vanta

Description du poste

Senior GRC Analyst I, SOC 2

Department: Governance, Risk & Compliance

Employment Type: Full Time

Location: Panama

Reporting To: Chris Roe

Compensation: B/.36,800 - B/.46,000 / year

Description

The Senior GRC Auditor I is responsible for ensuring client satisfaction and efficient execution of engagement plans, while serving as a coach and advisor to team members. This role focuses on IT controls, security, and compliance across SOC 2 engagements, as well as broader risk and assessment services. Responsibilities include evaluating, testing, and documenting controls related to security, availability, processing integrity, and key business processes, including access management, change management, and system operations.

This role works across both platform-enabled (e.g., Drata, Vanta) and traditional audit environments, requiring adaptability in leveraging automated evidence as well as performing manual audit procedures. The Senior GRC Auditor I will build strong client relationships through a deep understanding of client systems, technology environments, and compliance requirements, while effectively communicating audit findings and recommendations.

Only candidates located in Panama will be considered at this time.

Key Responsibilities

• Lead and conduct detailed external audits of clients' business processes and IT controls, ensuring compliance with industry standards and regulations.
• Observe, review, document, and test key business process transactions, access controls, change management controls, operational and organizational controls, and automated controls for engagements.
• Review, document, evaluate and test application controls, particularly automated controls on a wide range of systems and software applications across a wide variety of client business processes.
• Evaluate clients' business, IT, and security risks, identifying areas of concern and recommending appropriate control measures and process improvements to mitigate risks.
• Assess security policies and procedures, reviewing risk management / risk assessment documentation, and controls of our clients’ business applications, networks, operating systems, and other components of their technology infrastructure.
• Support internal and external security assessments of new and existing services and infrastructure including operational, regulatory, and contractual requirements.
• Develop and nurture strong relationships with clients, gaining insight into their businesses, risks, and compliance.

Skills, Knowledge and Expertise

• Bachelor’s degree required.
• 3+ years of IT Audit experience or Audit experience.
• Experience leading SOC 2 audits.
• Experience with controls reviews along with recommending, designing and advising on applicable IT controls.
• Experience teaching, training, mentoring other staff members is preferred.
• Relevant professional designation such as CISA, CISSP, CIPP, etc. is a plus.
• Experience with SOC 2 readiness platforms (e.g., Drata, Vanta, etc.) is preferred.

Compensation & Benefits

This role offers a competitive base salary along with a comprehensive benefits package. Salary ranges for U.S.-based positions are determined by geographic location and fall into one of three pay zones, which reflect the cost of labor in that area. The anticipated salary ranges for this position are outlined below and are subject to change:

• $36,800 - $46,000

When determining compensation, we consider a variety of factors such as a candidate’s professional experience, skills, and qualifications. Please note that final offer amounts may vary from the ranges listed above and may be adjusted over time.

Sensiba has a robust offering of benefits, including:

• Comprehensive Health Coverage – Allianz Health Best in Class package (Cover up to 2 Dependents) and Life and Disability Insurance.
• Generous Paid Time Off – Vacation, sick time, holidays, parental leave and volunteer days.
• Flexible Work Arrangements – Hybrid or remote options, flexible hours.
• Performance-Based Bonus – Recognition for your contributions through discretionary bonuses.
• Professional Development Opportunities – Tuition reimbursement, certifications, mentorship.
• Career Growth & Internal Mobility – Clear paths for advancement and role transitions.
• Inclusive & Supportive Culture – DEI initiatives, employee resource groups, wellness programs.