Senior GRC & Security Compliance Lead

Suno; Los Angeles (CA); On-site; USD 150,000 - 210,000; Full time

Job summary

Suno is seeking a Staff Security GRC Analyst to build and own Suno’s security compliance program from the ground up. You’ll report to the CISO and partner with AppSec, InfraSec, Product, and Legal to map controls to SOC 2 and NIST CSF, automating evidence where possible.

You’ll lead SOC 2 readiness end to end, drive remediation with control owners, and provide leadership with a clear, evidence-backed view of Suno’s security posture for the board. This is a greenfield role with real impact.

Qualifications

• 7–9 years in GRC, security compliance, or IT audit.
• End-to-end ownership of a security compliance program as its primary owner.
• Deep knowledge of SOC 2 and NIST CSF, including control mapping, audit mechanics, and evolving requirements.
• Enough technical fluency to read a cloud configuration and judge control enforcement.
• Comfort building automation with scripts or AI tools.

Responsibilities

• Build and own Suno’s security control framework, mapping controls to SOC 2, NIST CSF, and future frameworks; write control descriptions with the teams.
• Lead SOC 2 preparation end to end, from gap assessments to remediation with control owners and auditors.
• Automate evidence collection and control monitoring with scripts, integrations, and AI tools.
• Run vendor security reviews; keep policies current; respond to customer security questionnaires with Product and Legal.
• Partner with the CISO to provide leadership with an evidence-backed security posture to the board.
• Help earn trust of partners and customers to broaden Suno’s reach.

Skills

GRC experience

SOC 2 familiarity

NIST CSF

Automation scripting

Audit coordination

Education

CISA/CISSP/CRISC

Tools

GRC platform

AWS

GCP

Job description

Suno is seeking a Staff Security GRC Analyst to build and own Suno’s security compliance program from the ground up. You’ll report to the CISO and partner with AppSec, InfraSec, Product, and Legal to map controls to SOC 2 and NIST CSF, automating evidence where possible.

You’ll lead SOC 2 readiness end to end, drive remediation with control owners, and provide leadership with a clear, evidence-backed view of Suno’s security posture for the board. This is a greenfield role with real impact.