Suno
Staff Security GRC Analyst
$277K–$364K
NYC +3 · On-site · Staff · Full-time · Posted Oct 8, 2026
- Location
- NYC
Boston
Los Angeles
San Francisco - Experience
- 7–9 years in GRC, security compliance, or IT audit.
About the job
Build and own Suno’s security GRC program, including its control framework, SOC 2 readiness, automated evidence collection, and security reporting.
What you'll do
- Map and maintain security controls against SOC 2, NIST CSF, and future frameworks; lead SOC 2 preparation and remediation.
- Automate evidence collection and control monitoring; conduct vendor security reviews and maintain policies and customer questionnaires.
- Partner with the CISO and other teams to report on security posture to leadership and the board.
What they ask for
- 7–9 years in GRC, security compliance, or IT audit.
- Hands-on, end-to-end ownership of a security compliance program as its primary owner.
- Deep working knowledge of SOC 2 and NIST CSF, including control mapping and audit mechanics.
- Technical fluency to assess cloud configurations, access setups, or pipelines; comfort building automation with scripts or AI tools.
Nice to have
- Experience with continuous controls monitoring, automated evidence collection, or applying LLMs to assurance work.
- Experience with AWS or GCP, a modern GRC platform, or certifications such as CISA, CISSP, or CRISC.
Pay
$276,960 – $363,510 USD base salary
Tools
SOC 2, NIST CSF, AWS, GCP, LLMs
AI focus
Use AI tools to automate evidence collection and control monitoring, with human review where appropriate; LLMs may support control drafting, framework mapping, or evidence testing.
Model-written summary · the original posting is authoritative