Senior GRC Analyst
Crusoe — San Francisco, California, United States · In-Person · Senior · $155k/yearly
Role description
Role Overview
Crusoe is seeking a Sr. GRC Analyst to own and drive the day-to-day execution of our Governance, Risk, and Compliance program. Reporting to the Head of GRC, this role is responsible for running core compliance operations across our security and privacy frameworks, from user access reviews and audit evidence to customer trust support and vendor risk, while also bringing SOX expertise to the IT controls that underpin our internal controls over financial reporting (ICFR), from gap identification through remediation.
What You Will Do
Audit & Controls, Compliance Operations, Customer Trust, GRC Platform & Automation. The ideal candidate is proactive, detail-oriented, and brings a mindset for efficiency, leveraging AI tools and automation to reduce manual effort and scale their impact across the program.
Why It Might Be a Fit
The ideal candidate has 5–7 years of experience in GRC, information security, IT audit, or a related compliance role, with demonstrated ownership of end-to-end audit cycles, practical knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF, and solid understanding of SOX 404 audit requirements and IT general controls.
Requirements
- 5–7 years of experience in GRC, information security, IT audit, or a related compliance role
- Practical knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF
- Solid understanding of SOX 404 audit requirements and IT general controls
- Hands-on experience with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar also valued)
- Experience conducting user access reviews, vendor risk assessments, and internal audits
- Familiarity with responding to customer security questionnaires and managing trust center content
- Comfort using AI tools (e.g., Gemini, Claude, Copilot) to accelerate day-to-day work and improve operational efficiency
- Strong written and verbal communication skills with the ability to translate compliance requirements for both technical and non-technical audiences
Benefits
- Competitive compensation and equity packages
- Restricted Stock Units
- Paid time off, paid holidays & leave of absence programs
- Comprehensive health, dental & vision insurance
- Employer contributions to HSA account
- Paid parental leave
- Paid life insurance, short-term and long-term disability
- Professional development & tuition reimbursement
- Mental health & wellness support
- Commuter benefits (parking & transit)
- Cell phone stipend
- 401(k) Retirement plan with company match up to 4% of salary
- Volunteer time off
- Global travel insurance & emergency assistance
- Daily meals allowance
- Additional perks & programs specific to location