SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Semperis is a fast-growing cybersecurity company protecting hybrid identity environments for the world's largest enterprises, regulated industries, and government customers. The company has been recognized as one of America's Fastest-Growing Cybersecurity Companies by Inc. 5000 and a multi-year Inc. Best Workplace awardee.
As a Cybersecurity GRC Analyst, you will support the governance, risk, compliance, and customer trust programs that enable security-conscious enterprises and government customers to adopt Semperis cloud products with confidence. This is a hands-on, learning-focused role where you'll start with well-defined tasks and progressively take on more complex work as you develop expertise.
Key responsibilities include:
**Security Awareness Training:** Lead the annual Security and Compliance Training campaign in partnership with People Operations and Legal. Manage curriculum development, enrollment setup, weekly completion tracking, and escalation of overdue training. Handle training exceptions, maintain audit-ready records, and gather feedback for continuous improvement.
**Customer Trust:** Answer customer security questionnaires, starting with simpler requests and expanding your scope within the first few months. Verify answer accuracy, confirm NDA status before sharing sensitive information, and help maintain the answer library and Trust Center content.
**Audit and Compliance Support:** Learn and support the FedRAMP program under the FedRAMP ISSO. Gather, organize, and prepare evidence for SOC 2 and ISO 27001 audits, ensuring it meets audit requirements and is ready for reviewer and auditor review.
**Governance and Risk Support:** Coordinate security policy updates by routing policies for review and approval, publishing approved versions, and maintaining version history. Support vendor risk management by tracking annual recertifications and sending information requests. Provide administrative support for the cyber risk register. Recommend process improvements and help identify automation opportunities using Vanta and other GRC tools.
You'll work in a small, collaborative team where you'll gain exposure to every aspect of GRC. Experienced teammates will review your work and support you as you learn. You'll have access to modern GRC tooling, including Vanta, to work efficiently.
The role operates on a hybrid model with up to three days per week in the Austin office and remote work the remaining days.
**Requirements:**
- One of the following: CISA, CRISC, or CISSP certification, OR a degree in Cybersecurity
- At least 6 months of experience in a GRC role
- Strong organization, attention to detail, and follow-through on deadlines
- Clear written and verbal communication skills
- Working knowledge of Microsoft 365 and Excel
- Comfort using AI-assisted tools
- Must be eligible to work in the United States (no sponsorship provided)
**Preferred Qualifications:**
- 2 to 3 years of work experience in IT, cybersecurity, or GRC
- Exposure to SOC 2, ISO 27001, or FedRAMP audits in a supporting role or as an auditee
- Experience with modern GRC platforms such as Vanta
- Experience answering customer security questionnaires
- Experience at a SaaS, cloud, or cybersecurity company
