Senior GRC & Compliance Lead (SOC 2)

Strata Decision Technology, LLC in; Chicago (IL); Hybrid; USD 75,000 - 95,000; Full time

Job summary

Strata Decision Technology, LLC is seeking a Senior Compliance Associate to join our Information Technology group and advance our governance, risk, and compliance program in a hybrid Chicago-based role.

You will own and optimize our GRC platform, drive SOC 2 Type II readiness, and mature third-party risk management while supporting client security questionnaires and internal requests. The position emphasizes automation, documentation, and collaboration across stakeholders at all levels.

Qualifications

• 4+ years of relevant experience in GRC, IT audit, compliance, or a related discipline.
• Bachelor’s degree preferred, or equivalent relevant experience
• Hands-on experience administering or optimizing a GRC/compliance platform and using automation to improve evidence collection, control monitoring, workflows, or audit readiness
• Experience supporting or managing SOC 2 programs and controls
• Experience with Third-Party Risk Management and vendor security assessments
• Strong understanding of IT controls, compliance frameworks, and audit processes
• Excellent communication skills, including the ability to communicate technical concepts to non-technical audiences
• Strong technical writing and documentation skills
• Self-motivated, proactive, highly organized, and able to manage multiple priorities
• Ability to collaborate effectively with stakeholders at all levels of the organization

Responsibilities

• Manage and optimize Strata’s compliance platform, including platform administration, configuration, integrations, and ongoing improvements, while identifying and implementing opportunities to automate evidence collection, control monitoring, workflows, and other repeatable compliance activities
• Own and coordinate SOC 2 Type II activities, including audit readiness, evidence management, control testing, and remediation
• Own, mature, and expand Third-Party Risk Management and security due diligence processes
• Support customer security questionnaire (DDQ) responses and internal compliance requests by providing GRC expertise, evidence, and documentation as needed
• Support broader GRC initiatives and emerging compliance requirements as the program evolves

Skills

GRC

IT audit

Compliance

SOC 2

Vendor risk management

GRC tooling

Technical writing

Stakeholder collaboration

Education

Bachelor's degree in related field

Tools

GRC platform tooling

Job description

Strata Decision Technology, LLC is seeking a Senior Compliance Associate to join our Information Technology group and advance our governance, risk, and compliance program in a hybrid Chicago-based role.

You will own and optimize our GRC platform, drive SOC 2 Type II readiness, and mature third-party risk management while supporting client security questionnaires and internal requests. The position emphasizes automation, documentation, and collaboration across stakeholders at all levels.