Responsibilities

We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers adopt our cloud products with confidence.
As our Cybersecurity GRC Analyst, you'll support the team across governance, risk, compliance, and customer trust work, and you'll own our annual security awareness training campaign. This is a hands-on, learning-focused role: you'll start with well-defined tasks and take on more complex work as you learn our programs.
We are a small team, so you'll get exposure to every part of GRC. In your first year, you'll gather audit evidence for SOC 2 and ISO 27001, answer customer security questionnaires, coordinate policy updates, and support our vendor risk and FedRAMP work. Experienced teammates review your work and are there to help when something is new or complex. You'll also have AI and GRC tooling, including Vanta, to help you work efficiently.
You'll succeed by being organized, responsive, and easy to work with, making it simpler for control owners to provide what audits and customers need.
+++No sponsorship will be provided for this role. Candidate must be eligible to work in the country in which you apply+++
Security Awareness Training
Follow up on overdue security training, then lead the annual Security and Compliance Training campaign: work with People Operations and Legal on the curriculum, set up enrollments in the training platform, track completion weekly, and escalate overdue training.
Handle training exceptions, keep training records ready as audit evidence, and gather feedback to improve next year's campaign.
Answer customer security questionnaires, starting with simpler requests and taking on more within your first few months. Escalate complex requests to senior teammates.
Check answers for accuracy, confirm requestors are under NDA before sharing information, and help maintain our answer library and Trust Center content.
Audit and Compliance Support
Learn our FedRAMP program and support the FedRAMP ISSO as needed.

Cybersecurity GRC Analyst at Semperis · LumiJobs

Cybersecurity GRC Analyst

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Semperis

More roles at Semperis