GRC Analyst I, SOC 2

Sensiba

7d•Remote

About The Position

The GRC Analyst I supports clients undergoing SOC 2, HIPAA, ISO 27001, and related compliance engagements. This role focuses on evaluating governance, risk management, business processes, and operational controls that support compliance objectives. The ideal candidate possesses strong analytical skills, an interest in risk management and internal controls, and a desire to help organizations build scalable compliance programs.

Requirements

Foundational understanding of: Risk management, Internal controls, Compliance frameworks, Business process documentation
Strong communication and organizational skills.
Strong attention to detail and documentation abilities.
Familiarity with: SOC 2, HIPAA, ISO 27001, Third-party risk management

Nice To Haves

Bachelor's degree in Accounting, Risk Management, Business Administration, Information Systems, Cybersecurity, or related field.
CRISC
CISA
ISC2 CC
Internal Audit certifications

Responsibilities

Assist in the execution of SOC 2 examinations, readiness assessments, HIPAA engagements, and other compliance-related projects.
Observe, document, and test controls related to: Risk Management, Vendor Management, Security Awareness Training, Human Resources Processes, Physical Security, Asset Management, Business Continuity, Policy Governance.
Review organizational policies, procedures, and supporting documentation.
Evaluate control design and operating effectiveness.
Assess compliance with applicable frameworks and industry requirements.
Document business processes and control activities.
Identify control deficiencies, risks, and improvement opportunities.
Assist in the development of remediation recommendations.
Support readiness assessments and compliance gap analyses.
Perform walkthroughs with client personnel to understand business operations and compliance processes.
Build and maintain strong client relationships.
Communicate findings and recommendations professionally.
Collaborate effectively with engagement teams and client stakeholders.
Assist clients in understanding compliance requirements and best practices.