Senior GRC & Compliance Lead

Semperis; Phoenix (AZ); Ibrido; USD 110.000 - 140.000; Tempo pieno

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to own audit programs and drive policy governance across the security program. You will be the day‑to‑day owner of SOC 2 Type II and ISO 27001 audits, coordinate remediation with engineering teams, and manage complex customer security questionnaires.

The role involves collaboration with policy owners, legal, and product teams to deliver robust controls and governance.

Competenze

• 5+ years in GRC, info sec risk, compliance or IT audit, incl. SaaS experience.
• Certifications: CISSP/CRISC/CISM/CISA or degree in Cybersecurity.
• SOC 2 Type II and ISO 27001 audit experience.
• Clear written and verbal communication; ability to explain controls to engineers and business owners.
• Track record of results through influence with non‑direct reports.

Mansioni

• Own SOC2 Type II, ISO 27001 audits and attestation processes.
• Manage customer security questionnaires and due diligence requests.
• Maintain and update information security policies and standards.
• Drive remediation timelines with Engineering and track milestones.
• Support FedRAMP and other frameworks as needed.

Conoscenze

GRC experience

Audit experience

Stakeholder influence

Communication skills

Policy & standards

Formazione

Cybersecurity degree or certs (CISSP/CRISC/CISM/CISA)

Strumenti

Vanta

Drata

OneTrust

Archer

ServiceNow

Descrizione del lavoro

Semperis is seeking a Senior GRC Analyst to own audit programs and drive policy governance across the security program. You will be the day‑to‑day owner of SOC 2 Type II and ISO 27001 audits, coordinate remediation with engineering teams, and manage complex customer security questionnaires.

The role involves collaboration with policy owners, legal, and product teams to deliver robust controls and governance.