Senior InfoSec GRC Analyst – SOC 2 & ISO 27001

Purpose Financial; Greenville (SC); In loco; USD 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

Competitive Wages

Health/Life Benefits

Health Savings Account plus Employer

401(k) Savings Plan with Company Match

Paid Parental Leave

Company Paid Holidays

Paid Time Off including Volunteer Time

Tuition Reimbursement

Business Casual Environment

Rewards & Recognition Program

Employee Assistance Program

Downtown Greenville office with free/‑

Descrizione del lavoro

Purpose Financial, Inc. in Greenville, SC, is seeking a skilled GRC professional to design, implement, audit, and maintain governance, risk, and compliance controls across SOC 2 Type II readiness and ISO 27001 certification.

The role partners with IT, SecOps, Legal, Internal Audit, and business stakeholders to protect information assets and drive continuous compliance. You will manage risk, evidence collection, third‑party oversight, and audit readiness while supporting incident response and

Competenze

• Bachelor's degree in Information Security or equivalent experience.
• 3–5+ years of information security GRC, compliance, or audit experience.
• Hands-on experience with SOC 2 Type II audits (as auditee, control owner, or auditor).
• Knowledge of SOC 2, ISO 27001, NIST CSF, NIST SP 800-53, and CIS Controls.

Mansioni

• Maintain and evolve information security policies, standards, and controls mapped to SOC 2, ISO 27001, NIST, and CIS frameworks.
• Maintain risk registers, conduct risk assessments, and support remediation tracking.
• Own end-to-end audit preparation for SOC 2 Type II and ISO 27001 certification, including control testing, evidence collection, gap remediation, and findings tracking.
• Partner with IT and SecOps to operationalize controls across access management, encryption, logging, vulnerability management, and backup/DR.
• Leverage GRC platforms for real-time visibility into control health and coordinate remediation with owners.
• Maintain a structured evidence repository and coordinate evidence requests from external auditors.
• Manage third-party risk assessments, security questionnaires (SIG/CAIQ), and vendor monitoring.
• Oversee the full control lifecycle, including design, changes, depredation, and exceptions.
• Develop training and guidance to promote control adoption across business units.
• Produce dashboards and reports on risk posture and audit readiness for stakeholders.
• Support incident response, BCP/DR planning, and privacy obligations.

Conoscenze

SOC 2 Type II

ISO 27001

NIST CSF

GRC platforms

Policy development

Risk assessment

Audit readiness

Stakeholder communication

Formazione

Bachelor's degree in Information Security

Strumenti

SharePoint

GRC platform

CAIQ/SIG

Descrizione del lavoro

Purpose Financial, Inc. in Greenville, SC, is seeking a skilled GRC professional to design, implement, audit, and maintain governance, risk, and compliance controls across SOC 2 Type II readiness and ISO 27001 certification.

The role partners with IT, SecOps, Legal, Internal Audit, and business stakeholders to protect information assets and drive continuous compliance. You will manage risk, evidence collection, third‑party oversight, and audit readiness while supporting incident response and