Senior GRC Analyst

Owns three programmes on Semperis's small GRC team: SOC 2, ISO 27001 and HIPAA audits, customer security questionnaires, and the upkeep of security policies and standards. The analyst is the day-to-day contact for remediation of audit findings, supports FedRAMP work, backs up colleagues on vendor risk and the Trust Center, and brings recommendations to the Head of Risk and Compliance.

The company wants five or more years in GRC, security risk, compliance or IT audit, including at a SaaS company, SOC 2 Type II and ISO 27001 audit experience, and a cybersecurity degree or a CISSP, CRISC, CISM or CISA. US citizenship is required. Hybrid in Hoboken.