Crusoe
Senior GRC Analyst
$130K–$155K
San Francisco, CA - US · On-site · Senior · Full-time · Posted Oct 22, 2026
- Experience
- 5–7 years.
About the job
Owns day-to-day GRC operations, including audit and SOX IT controls, compliance frameworks, customer trust support, vendor risk, and improvements to GRC tooling and automation.
What you'll do
- Manage audit cycles and evidence for SOX, SOC 2, ISO 27001, HIPAA, and other requirements; coordinate with auditors and control owners.
- Run recurring user access reviews, maintain policies, conduct vendor assessments, and respond to customer security questionnaires.
- Improve GRC platform workflows and automation, apply AI tools to compliance work, and report compliance metrics and control health.
What they ask for
- 5–7 years of experience in GRC, information security, IT audit, or related compliance, with ownership of end-to-end audit cycles.
- Practical knowledge of SOC 2, ISO 27001, HIPAA, and NIST CSF.
- Understanding of SOX 404 and IT general controls, with hands-on experience identifying gaps and driving remediation.
- Experience with user access reviews, vendor risk assessments, and internal audits.
Nice to have
- GRC platform experience; Vanta is preferred, and Drata, AuditBoard, or similar are valued.
- Certifications such as CISA, CRISC, CISSP, Security+, or ISO 27001 Lead Auditor; cloud experience, with GCP preferred.
Pay
up to $130,000 - $155,000 USD base salary + Bonus (amount and pay type not specified); Restricted Stock Units included in all offers
Tools
SOX, SOC 2, ISO 27001, HIPAA, NIST CSF, Vanta, Drata, AuditBoard
AI focus
Use AI and LLM-based tools to accelerate compliance operations, including questionnaire responses, audit evidence summaries, and policy drafting; familiarity with AI risk assessment and governance is a bonus.
Model-written summary · the original posting is authoritative