SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Semperis is a fast-growing cybersecurity company protecting hybrid identity environments for the world's largest enterprises, regulated industries, and government customers. The Cybersecurity GRC Analyst role supports the governance, risk, compliance, and customer trust programs that enable security-conscious organizations to adopt Semperis cloud products with confidence.
This is a hands-on, learning-focused position within a small, collaborative GRC team. You will gain exposure across all aspects of GRC work, starting with well-defined tasks and progressing to more complex responsibilities as you develop expertise.
Key Responsibilities:
Security Awareness Training: Lead the annual Security and Compliance Training campaign in partnership with People Operations and Legal. Manage curriculum development, platform enrollments, weekly completion tracking, and escalation of overdue training. Handle training exceptions, maintain audit-ready records, and gather feedback for continuous improvement.
Customer Trust: Answer customer security questionnaires, beginning with simpler requests and expanding scope within your first few months. Verify answer accuracy, confirm NDA status before sharing sensitive information, and maintain the answer library and Trust Center content.
Audit and Compliance Support: Learn and support the FedRAMP program under the FedRAMP ISSO. Gather, organize, and validate evidence for SOC 2 and ISO 27001 audits, ensuring it meets audit requirements and is audit-ready before submission.
Governance and Risk Support: Coordinate security policy updates including routing for review, publishing approved versions, and maintaining version history. Recommend process improvements to team operations and work priorities. Support vendor risk management by tracking annual recertifications and managing information requests. Provide administrative support for the cyber risk register. Leverage the Vanta GRC platform to identify automation opportunities and streamline evidence collection.
You will have access to AI-assisted tools and modern GRC platforms to work efficiently. Experienced teammates provide guidance and review on new or complex work.
First-year success measures include completing assignments correctly and on time with good judgment about escalation, delivering the annual training campaign on schedule, sharing ownership of customer security questionnaires within months, and ensuring SOC 2 and ISO 27001 audit evidence is complete and timely.
Requirements:
- One of the following: CISA, CRISC, or CISSP certification, OR a degree in Cybersecurity
- Minimum 6 months of experience in a GRC role
- Strong organization, attention to detail, and follow-through on deadlines
- Clear written and verbal communication skills
- Working knowledge of Microsoft 365 and Excel
- Comfort using AI-assisted tools
Preferred Qualifications:
- 2 to 3 years of work experience in IT, cybersecurity, or GRC
- Exposure to SOC 2, ISO 27001, or FedRAMP audits in a supporting role or as an auditee
- Experience with modern GRC platforms such as Vanta
- Experience answering customer security questionnaires
- Experience at a SaaS, cloud, or cybersecurity company
Note: No sponsorship will be provided. Candidate must be eligible to work in the United States.
