Senior GRC Analyst at Crusoe · LumiJobs

Responsibilities

Crusoe is seeking a Sr. GRC Analyst to own and drive the day-to-day execution of our Governance, Risk, and Compliance program. Reporting to the Head of GRC, this role is responsible for running core compliance operations across our security and privacy frameworks, from user access reviews and audit evidence to customer trust support and vendor risk, while also bringing SOX expertise to the IT controls that underpin our internal controls over financial reporting (ICFR), from gap identification through remediation.
You'll be the engine behind our continuous compliance posture: keeping audits on track, maintaining policies and standards, responding to customer security inquiries, and driving improvements across our GRC platform. As a senior member of the team, you'll be expected to operate independently, take ownership of full audit cycles, and partner confidently with stakeholders across IT, Security, Finance, and Engineering. The ideal candidate is proactive, detail-oriented, and brings a mindset for efficiency, leveraging AI tools and automation to reduce manual effort and scale their impact across the program.
What You'll Be Working On:
Audit & Controls
Applying expertise in SOX audit requirements to support the design, operation, and testing of IT general controls (ITGCs), including access management, change management, and computer operations, and maintaining the related control documentation, process narratives, and risk-control matrices
Evaluating in-scope systems and processes to identify SOX control gaps, and partnering closely with control owners across IT, Finance, and Engineering to design and drive remediation plans with clear ownership and timelines through to closure
Collecting, organizing, and delivering audit evidence for SOX, SOC 2, ISO 27001, HIPAA, and other framework requirements
Partnering with internal control owners to ensure evidence is accurate, current, and audit-ready
Acting as a day-to-day point of contact for internal and external auditors, managing requests and facilitating walkthroughs
Responding to evidence and documentation requests for various strategic initiatives
Compliance Operations
Owning the coordination and completion of User Access Reviews (UARs) across in-scope systems and applications on a recurring schedule, including those supporting financial reporting

Senior GRC Analyst

Responsibilities

Qualification

Preferred

Benefits

Company

Crusoe

More roles at Crusoe