> Markdown version of [/jobs/ext/1918301-grc-analyst-i-soc-2](https://www.wearedevelopers.com/jobs/ext/1918301-grc-analyst-i-soc-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst I, SOC 2

- **Company:** Sensiba LLP
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Business Process Management, Cyber Security, Information Systems
- **Published:** August 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=49554f57874da4c7

## About the Role

The ideal candidate possesses strong analytical skills, an interest in risk management and internal controls, and a desire to help organizations build scalable compliance programs., * Risk management

 * Internal controls
 * Compliance frameworks
 * Business process documentation
 * Strong communication and organizational skills.
 * Strong attention to detail and documentation abilities.

Familiarity with:

 * SOC 2
 * HIPAA
 * ISO 27001
 * Third-party risk management

Educational and Certification Preferences:

 * Bachelor's degree in Accounting, Risk Management, Business Administration, Information Systems, Cybersecurity, or related field.
 * CRISC
 * CISA
 * ISC2 CC
 * Internal Audit certifications

## Description

The GRC Analyst I supports clients undergoing SOC 2, HIPAA, ISO 27001, and related compliance engagements. This role focuses on evaluating governance, risk management, business processes, and operational controls that support compliance objectives., * Assist in the execution of SOC 2 examinations, readiness assessments, HIPAA engagements, and other compliance-related projects.

 * Observe, document, and test controls related to:
 + Risk Management
 + Vendor Management
 + Security Awareness Training
 + Human Resources Processes
 + Physical Security
 + Asset Management
 + Business Continuity
 + Policy Governance
 * Review organizational policies, procedures, and supporting documentation.
 * Evaluate control design and operating effectiveness.
 * Assess compliance with applicable frameworks and industry requirements.
 * Document business processes and control activities.
 * Identify control deficiencies, risks, and improvement opportunities.
 * Assist in the development of remediation recommendations.
 * Support readiness assessments and compliance gap analyses.
 * Perform walkthroughs with client personnel to understand business operations and compliance processes.
 * Build and maintain strong client relationships.
 * Communicate findings and recommendations professionally.
 * Collaborate effectively with engagement teams and client stakeholders.
 * Assist clients in understanding compliance requirements and best practices.


## Related Videos

- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion)
- [The Deichmann RPA journey: Step by step with low-code automation to success](https://www.wearedevelopers.com/videos/1566-the-deichmann-rpa-journey-step-by-step-with-low-code-automation-to-success)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Giving AI eyes: How to build a dashboard you can't see](https://www.wearedevelopers.com/videos/100193-giving-ai-eyes-how-to-build-a-dashboard-you-can-t-see)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)