GRC Analyst I, SOC 2 (Platform)

Sensiba LLP
United States
8 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Job source

Tech stack

Amazon Web Services Microsoft Azure Business Software Software as a Service Cloud Computing Cloud Computing Security Cyber Security Information Systems Computer Networks Identity and Access Management Systems Development Life Cycle Security Information and Event Management
+7 more
Software Engineering Data Streaming Systems Architecture Systems Integration Software Vulnerability Management Google Cloud Information Technology

Job description

The GRC Analyst I supports clients undergoing SOC 2, ISO 27001, and related cybersecurity compliance assessments. This role focuses on evaluating security controls within cloud-based and technology-driven environments, including infrastructure, applications, software development practices, and information security programs. The ideal candidate possesses a foundational understanding of cybersecurity concepts, cloud technologies, and technology risk management. They are interested in helping innovative technology companies strengthen their control environments while developing expertise in cybersecurity assurance and compliance., * Assist in the execution of SOC 2 examinations, readiness assessments, and other cybersecurity compliance engagements.

  • Observe, document, and test controls related to:
  • Identity and Access Management (IAM)
  • Change Management
  • Vulnerability Management
  • Incident Response
  • Security Monitoring
  • Backup and Recovery
  • Vendor Management
  • Risk Management
  • Review and evaluate security policies, standards, and procedures.
  • Assess the design and operating effectiveness of IT and security controls.
  • Perform testing of logical access controls across cloud and business applications.
  • Document client control environments and supporting evidence.
  • Develop an understanding of client technology environments, including:
  • AWS
  • Azure
  • Google Cloud Platform (GCP)
  • SaaS applications
  • Infrastructure and networking concepts
  • Review software development lifecycle (SDLC) processes and change management controls.
  • Evaluate cloud security controls and supporting configurations.
  • Assist with documenting system architecture, data flows, and integrations.
  • Build and maintain strong client relationships.
  • Communicate findings and recommendations clearly and professionally.
  • Participate in client meetings and walkthroughs.
  • Support clients in understanding remediation opportunities and compliance expectations.

Requirements

  • Cloud computing
  • Networking
  • Cybersecurity principles
  • Information security controls
  • Strong written and verbal communication skills.
  • Strong analytical and problem-solving abilities.
  • Ability to manage multiple priorities and deadlines

Familiarity with:

  • AWS, Azure, or GCP
  • SIEM solutions
  • Vulnerability management solutions
  • Security operations concepts

Educational Preferences:

  • Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.

Benefits & conditions

Pulled from the full job description

  • Tuition reimbursement
  • Parental leave
  • Opportunities for advancement, There are many reasons to join the Sensiba team: market-leading leave entitlements, competitive compensation, professional advancement opportunities, and above all - our people. If you’re looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work, apply today!

Sensiba has a robust offering of benefits, including:

  • Market-Leading Annual Leave - We offer 30 days of paid annual leave (10 days above the Irish statutory minimum), plus an additional 5 days of paid leave for our firm’s mid-year shutdown in July. You will also have access to personal/carer’s leave, parental leave, and volunteer days.
  • Pension Scheme - Plan for your future with our company-supported pension program.
  • Flexible & Remote Work - We are a remote-first firm. Enjoy the flexibility of working from home, with WeWork subscriptions and access to local office hubs available for those who value face-to-face collaboration.
  • Performance-Based Bonus - Recognition for your contributions through our annual discretionary bonus program.
  • Professional Development - We invest in your expertise through tuition reimbursement, support for professional certifications (ACA, ACCA, CPA etc.), and dedicated mentorship.
  • Tech of Your Choice - We offer your choice of a high-spec Mac or PC setup.
  • Inclusive & Supportive Culture - DEI initiatives, employee resource groups, and comprehensive wellness programs.

About the company

About Sensiba

At Sensiba, we’re more than just a Top 75 Accounting Firm - we’re a purpose-driven organization committed to making a meaningful impact for our clients, our people, and our communities. Recognized as a Top Workplace USA, we’re proud of our culture of exceptional employee engagement, collaboration, and continuous growth. We help clients solve problems, navigate complexity, and build a foundation for sustainable success. Whether supporting fast-growing startups or established enterprises, we bring deep expertise and a people-first approach to every engagement. In 2018, Sensiba became a certified B Corporation (B Corp ) - a designation that reflects our commitment to using business as a force for good. This certification holds us accountable to high standards of social and environmental performance, transparency, and ethical governance. It’s not just a badge - it’s a reflection of how we operate, make decisions, and support our stakeholders.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

6:10 min

Unlocking free learning credits via Google Cloud Innovators

Asrar Asrar · WWC 2024

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · WWC 2022

1:50 min

Lowering pipeline latency with data streaming

Nathaniel Okenwa Nathaniel Okenwa · WWC 2024

2:14 min

Securing analysis platforms via network access controls

Jennifer Reif · LIVE

4:42 min

Container hosting options available on Google Cloud Platform

Federico Fregosi · WWC 2022

1:01 min

Reviewing supplementary platform features and secured enterprise environments

Videos

See all

Related articles

See all