> Markdown version of [/jobs/ext/486354-senior-grc-analyst-soc-2](https://www.wearedevelopers.com/jobs/ext/486354-senior-grc-analyst-soc-2). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior GRC Analyst , SOC 2 - **Company:** Sensiba LLP - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing, Cyber Security, Information Systems, Data Centers, Information Technology Audit, Automation of Marketing, Virtualization Technology, Google Cloud, Cloud Platform System, IT General Controls (ITGC), Information Technology - **Published:** June 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=9e8b1d212e43e138 ## About the Role Do you have experience in SaaS?, Do you have a Bachelor's degree?, * Knowledge of relevant regulations and industry standards (e.g., SSAE 18/SOC, HIPAA, ISO-27001, COSO, HITRUST, etc.) and best practices and methodologies to address these requirements. * Fundamental understanding of audit principles such as risk assessment, materiality, independence and sufficiency of evidence * Ability to apply these requirements to organizational internal control frameworks * Understanding of technical concepts such as cyber security, virtualization, data center, cloud computing, and the like * Ability to interpret/relay technical information to all levels of technical aptitude, including senior management. This includes written and oral communications * Documentation skills are a must. Ability to articulate, write and present information in a clear and understandable manner and to meet the re-performance standard required for supporting our audit work * Strong time management, project management and organizational skills with the ability to manage multiple priorities successfully within a deadline-driven environment, * 3+ years of experience in SOC 2, IT audit, or GRC, preferably within public accounting or consulting. * Demonstrated experience leading SOC 2 Type I and Type II engagements. * Hands-on experience administering or auditing within SOC 2 automation platforms (e.g., Drata, Vanta, Secureframe, or similar). * Deep understanding of: + AICPA Trust Services Criteria + IT General Controls (ITGCs) + Cloud environments (AWS, Azure, GCP) + SaaS operational environments * Experience reviewing automated evidence and continuous monitoring outputs. * Strong client advisory and presentation skills, including executive-level communication. * Ability to manage multiple engagements in fast-paced, high-growth environments. * Preferred: + Experience working with venture-backed or high-growth SaaS companies. + Familiarity with adjacent frameworks (ISO 27001, NIST CSF). + Professional certifications such as CISA, CISSP, CISM, or CRISC. + Bachelor's degree in Information Systems, Computer Science, Accounting, or related field; advanced degree a plus. ## Description The Senior GRC Analyst I - SOC 2 will serve as a technical leader and subject matter expert focused on SOC 2 readiness and examination audits, with deep specialization in SOC 2 automation platforms (e.g., Drata, Vanta, Secureframe, etc.). This role is responsible for ensuring client satisfaction and efficient execution of engagement plans, while being the coach and advisor to team members. The Senior Analyst I combines strong technical knowledge of SOC 2, ITGCs, and cloud environments with hands-on expertise configuring and managing SOC 2 compliance platforms to streamline evidence collection, continuous monitoring, and audit execution. The Senior Analyst will build robust client relationships grounded in a deep understanding of their operations, challenges, and compliance needs. The role is pivotal in delivering top-notch services, centering on clients' business, IT, and security risk management. Only candidates in Australia will be considered at this time. ## Related Videos - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [The Sustainability Race: AI's Promises, Pitfalls and Potential](https://www.wearedevelopers.com/videos/100155-the-sustainability-race-ai-s-promises-pitfalls-and-potential) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)