GRC Compliance Auditor

NorthMark Strategies • Dallas, TX

7d • Onsite

About The Position

NorthMark Compute & Cloud (NMC²) is seeking a detail-oriented GRC Compliance Auditor to join its Information Security team. The role is based at the company’s Dallas, Texas offices at Victory Commons and reports to the GRC & Privacy Manager.

The auditor owns day-to-day execution of NMC²’s SOC 2 Type II and ISO 27001 compliance programs, including readiness assessments, control mapping, evidence collection, and external audit coordination. The role also serves as the primary administrator of the GRC platform, maintaining the control framework library, driving automated evidence collection, and producing compliance posture reporting for leadership.

The position works with control owners across Engineering, IT, HR, Legal, and Operations to translate regulatory requirements into practical controls and incorporate audit readiness into daily operations. The successful candidate will bring hands-on SOC 2 and ISO 27001 experience, identify control gaps, and guide technical and non-technical stakeholders through audits while minimizing business disruption.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Business Administration, or a related field, or equivalent experience.
• 4–8 years of hands-on experience in GRC, IT audit, or information security compliance.
• Demonstrated experience conducting or supporting SOC 2 Type II audits, including evidence collection, control testing, and auditor coordination.
• Working knowledge of ISO 27001/27002 requirements and experience supporting certification or surveillance audits.
• Hands-on experience administering a GRC or compliance automation platform such as Vanta, Drata, Hyperproof, AuditBoard, or equivalent.
• Ability to translate complex regulatory requirements into practical, implementable controls and evidence procedures.
• Familiarity with identity and access management tools such as Entra ID, Okta, or equivalent, in the context of access reviews and compliance evidence.
• Experience working with control owners across Engineering, IT, Legal, HR, and Operations to define and validate control procedures.
• Strong written and verbal communication skills, including the ability to present compliance findings to technical and non-technical audiences.
• Must be legally authorized to work in the United States without needing employer sponsorship now or at any time in the future.

Nice To Haves

• One or more relevant certifications, such as CISA, ISO 27001 Lead Auditor or Lead Implementer, CISM, CISSP, or CRISC.

Responsibilities

• Lead internal SOC 2 Type II and ISO 27001 audit cycles, assess control design and operating effectiveness, and identify deficiencies for remediation.
• Coordinate external audits, including scheduling walkthroughs, preparing evidence packages, managing auditor requests, and tracking findings through validated closure.
• Conduct readiness assessments and compliance-framework gap analyses, and recommend remediation actions prioritized by risk and business impact.
• Develop and maintain a cross-framework control library mapping SOC 2 TSC, ISO 27001 Annex A, NIST CSF, and other applicable standards to operational controls.
• Administer the GRC and compliance automation platform, including configuration of control frameworks, evidence integrations, risk registers, and compliance dashboards.
• Drive automated evidence collection through integrations with identity provider, identity governance and administration, HR, and infrastructure systems.
• Produce executive-ready compliance posture reports, control health metrics, and audit-readiness scorecards for leadership and board-level stakeholders.
• Manage and track remediation of audit findings, exceptions, and risk acceptances, and conduct vendor and third-party risk assessments against SOC 2 and ISO 27001 requirements.
• Develop audit-readiness training, control-owner guides, and playbooks to promote compliance awareness across Engineering, Product, and Operations.
• Respond to customer security questionnaires and due-diligence requests concerning audit certifications and the company’s compliance posture.

Benefits

• Company-paid lunch stipend; lunch is provided via GrubHub.
• 100% employer-paid medical coverage in the High Deductible Health Plan, plus dental and vision benefits for employees and their families.
• 16 weeks of paid parental leave.
• Employee Assistance Program.
• Life insurance.
• Short-term disability and long-term disability.
• 401(k) with a 100% company match on employee contributions up to 6%.
• Optional employee-paid PPO medical insurance and other benefits, including Health Savings Accounts with a company contribution, Flexible Spending Accounts, supplemental life insurance, and Wellhub.
• 25 days of paid time off plus 12 company holidays.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level