Senior GRC Associate

Strata Decision Technology; Chicago (IL); Hybrid; USD 75,000 - 95,000; Full time

Benefits offered by this job

Retirement benefits

Health benefits

Paid time off

Parental leave

Life and accident insurance

Well-being programs

Job summary

Strata Decision Technology in Chicago, IL, seeks a Senior Compliance Associate to strengthen governance, risk, and compliance operations within the Information Technology group. You will own SOC 2 activities, advance Third-Party Risk Management, and manage compliance technology to automate evidence collection and monitoring.

The role is hybrid, requiring in-office presence two days per week at Strata’s Chicago office; you will collaborate across teams to ensure client requirements and industry

Qualifications

• 4+ years of experience in GRC, IT audit, or related field.
• Bachelor’s degree preferred or equivalent experience.
• Hands-on with administering or optimizing a GRC/compliance platform.

Responsibilities

• Manage and optimize Strata’s compliance platform with automation for evidence collection and monitoring.
• Own SOC 2 Type II activities including readiness, evidence, and remediation.
• Own Third-Party Risk Management and vendor security assessments.
• Support customer security questionnaires and internal requests with GRC documentation.
• Support broader GRC initiatives as the program evolves.

Skills

GRC

IT audit

SOC 2

Third-Party Risk

Automation

Documentation

Education

Bachelor's degree

Tools

GRC software

Job description

The Senior Compliance Associate will work within Strata’s Information Technology group and support the organization’s governance, risk, and compliance program. This role will focus on strengthening compliance operations, managing Strata’s compliance technology, supporting SOC 2 activities, and advancing Strata’s Third-Party Risk Management program. The position works collaboratively to ensure Strata complies with industry regulations, client requirements, and best practices.

This is an opportunity to help shape how GRC operates at Strata. You’ll have meaningful ownership of our compliance technology, with the opportunity to automate manual processes, mature established SOC and Third-Party Risk programs, and build scalable GRC practices as our compliance needs continue to evolve.

This role requires in-office presence at Strata’s Chicago office two days per week. Candidates should be comfortable working within this hybrid model.

Key Responsibilities:

• Manage and optimize Strata’s compliance platform, including platform administration, configuration, integrations, and ongoing improvements, while identifying and implementing opportunities to automate evidence collection, control monitoring, workflows, and other repeatable compliance activities
• Own and coordinate SOC 2 Type II activities, including audit readiness, evidence management, control testing, and remediation
• Own, mature, and expand Third-Party Risk Management and security due diligence processes
• Support customer security questionnaire (DDQ) responses and internal compliance requests by providing GRC expertise, evidence, and documentation as needed
• Support broader GRC initiatives and emerging compliance requirements as the program evolves

What we’re looking for:

• 4+ years of relevant experience in GRC, IT audit, compliance, or a related discipline
• Bachelor’s degree in a related field preferred, or equivalent relevant experience
• Hands‑on experience administering or optimizing a GRC/compliance platform and using automation to improve evidence collection, control monitoring, workflows, or audit readiness
• Experience supporting or managing SOC 2 programs and controls
• Experience with Third-Party Risk Management and vendor security assessments
• Strong understanding of IT controls, compliance frameworks, and audit processes
• Excellent communication skills, including the ability to communicate technical concepts to non‑technical audiences
• Strong technical writing and documentation skills
• Self‑motivated, proactive, highly organized, and able to manage multiple priorities
• Ability to collaborate effectively with stakeholders at all levels of the organization

Preferred qualifications:

Experience administering and optimizing GRC/compliance platforms; CISA, CRISC, or other relevant GRC, information security, or compliance certifications.

Estimated Salary Range: $75,000 - $95,000. Actual salary will be determined based on factors including, but not limited to, skill set and level of experience. This salary range is a good faith estimate of base pay. Strata also provides discretionary variable pay programs based on role. In addition, Strata provides a comprehensive benefits package including retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well‑being benefits.

Find out more about Strata benefits here.

How we work:

Our preferred location for open roles is Chicago, IL. We value in‑person connection and regularly host on‑campus events to create meaningful opportunities for our team to build relationships and collaborate.

Should you require a reasonable accommodation in completing this application, interviewing, completing any pre‑employment testing, or otherwise participating in the employee selection process, please reach out to [e-mail].

Here @ Strata…

Our culture is driven by our people solving problems together. We embrace learning, collaboration, and continuous career growth. Together, we lift our customers, our products, our company, and our community.

We believe that each of our team member’s unique perspectives and experiences is what drives innovation and positive change. Our individual differences are what make us a more forward‑thinking organization. We foster a culture of inclusion, equity and belonging, regardless of race, religion, disability, sex, sexual orientation, gender identity or national origin.

Our Core Values:

• We connect with positive intent.
• We are helpful.
• We own it.
• We are humble.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Strata Decision Technology’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.