Senior GRC Analyst - SOC 2 & IT Compliance

Tier4 Group; Atlanta (GA); On-site; USD 90,000 - 150,000; Full time

Job summary

Tier4 Group is seeking an IT Governance, Risk & Compliance (GRC) Analyst to support technology compliance, risk, and data governance programs in Atlanta. This hands-on role focuses on SOC 2 readiness and IT controls, with collaboration across security, IT, and audit teams.

You will coordinate access reviews, administer Purview-based classifications, retention initiatives, and security awareness activities while maintaining audit-ready documentation.

Qualifications

• 4+ years of experience in IT GRC or related fields.
• Understanding of IT controls, audit evidence, and risk management concepts.
• Experience with Microsoft 365 or similar enterprise environments.
• Strong organization and communication skills.

Responsibilities

• Maintain SOC 2 control calendar and coordinate activities.
• Collect, review, and maintain audit evidence.
• Track control gaps, remediation plans and items.
• Coordinate SOC 2 readiness with external auditors.
• Perform and document user and privileged access reviews.
• Support Purview initiatives: data classification, DLP, retention.
• Assist with data retention programs development.
• Administer security awareness campaigns and phishing simulations.
• Review change requests for compliance and audit requirements.

Skills

IT GRC

SOC/SOX controls

Microsoft 365 experience

Documentation

Communication

Independent work

Tools

Microsoft Purview

Entra ID

GRC platforms

Job description

Tier4 Group is seeking an IT Governance, Risk & Compliance (GRC) Analyst to support technology compliance, risk, and data governance programs in Atlanta. This hands-on role focuses on SOC 2 readiness and IT controls, with collaboration across security, IT, and audit teams.

You will coordinate access reviews, administer Purview-based classifications, retention initiatives, and security awareness activities while maintaining audit-ready documentation.