> Markdown version of [/jobs/ext/1920950-grc-analyst-i-soc-2-platform](https://www.wearedevelopers.com/jobs/ext/1920950-grc-analyst-i-soc-2-platform). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# GRC Analyst I, SOC 2 (Platform)

- **Company:** Sensiba LLP
- **Location:** United States (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Business Software, Software as a Service, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Computer Networks, Identity and Access Management, Systems Development Life Cycle, Security Information and Event Management, Software Engineering, Data Streaming, Systems Architecture, Systems Integration, Software Vulnerability Management, Google Cloud, Information Technology
- **Published:** August 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=0639a140459c1aed

## About the Role

* Cloud computing
 * Networking
 * Cybersecurity principles
 * Information security controls
 * Strong written and verbal communication skills.
 * Strong analytical and problem-solving abilities.
 * Ability to manage multiple priorities and deadlines

Familiarity with:

 * AWS, Azure, or GCP
 * SIEM solutions
 * Vulnerability management solutions
 * Security operations concepts

Educational Preferences:

 * Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.

## Description

The GRC Analyst I supports clients undergoing SOC 2, ISO 27001, and related cybersecurity compliance assessments. This role focuses on evaluating security controls within cloud-based and technology-driven environments, including infrastructure, applications, software development practices, and information security programs. The ideal candidate possesses a foundational understanding of cybersecurity concepts, cloud technologies, and technology risk management. They are interested in helping innovative technology companies strengthen their control environments while developing expertise in cybersecurity assurance and compliance., * Assist in the execution of SOC 2 examinations, readiness assessments, and other cybersecurity compliance engagements.

 * Observe, document, and test controls related to:
 + Identity and Access Management (IAM)
 + Change Management
 + Vulnerability Management
 + Incident Response
 + Security Monitoring
 + Backup and Recovery
 + Vendor Management
 + Risk Management
 * Review and evaluate security policies, standards, and procedures.
 * Assess the design and operating effectiveness of IT and security controls.
 * Perform testing of logical access controls across cloud and business applications.
 * Document client control environments and supporting evidence.
 * Develop an understanding of client technology environments, including:
 + AWS
 + Azure
 + Google Cloud Platform (GCP)
 + SaaS applications
 + Infrastructure and networking concepts
 * Review software development lifecycle (SDLC) processes and change management controls.
 * Evaluate cloud security controls and supporting configurations.
 * Assist with documenting system architecture, data flows, and integrations.
 * Build and maintain strong client relationships.
 * Communicate findings and recommendations clearly and professionally.
 * Participate in client meetings and walkthroughs.
 * Support clients in understanding remediation opportunities and compliance expectations.


## Related Videos

- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Python-Based Data Streaming Pipelines Within Minutes](https://www.wearedevelopers.com/videos/1233-python-based-data-streaming-pipelines-within-minutes)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)