GRC Analyst

You will own the SOC 1 control environment from evidence collection through report issuance You will coordinate with external auditors and internal teams to ensure controls are tested and clearly documented You will maintain an audit ready repository and keep the program compliant year round

Responsibilities

• Own the SOC 1 Type II control environment end to end across the organization
• Collect label and file control evidence and maintain an audit ready repository
• Translate each control objective into testable specifications for Engineering Infrastructure Security HR and Finance
• Manage the external auditor relationship including transition scoping walkthroughs PBC and sample requests
• Represent the program to customers and respond to control questions
• Execute recurring controls such as weekly reconciliations quarterly access reviews and the annual cycle including penetration testing cloud AWS SOC report review board minutes and security training
• Oversee access lifecycle including approvals terminations and offboarding
• Maintain operational controls covering monitoring vulnerability scanning backups BCP DR and incident records

Requirements

• 3-5 years in IT compliance IT audit or GRC including at least one full SOC 1 Type II cycle owned hands on
• Finance reconciliation expertise a strong grasp of transaction and balance reconciliation and discrepancy resolution
• Crypto or digital asset reconciliation experience is a strong plus
• Hands on tooling fluency in AWS IAM SSO GitHub ticketing systems monitoring vulnerability scanners and compliance tooling
• Documentation discipline producing clear audit grade documentation as a matter of habit