SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Semperis is a fast-growing cybersecurity company protecting hybrid identity environments for the world's largest enterprises and regulated industries. The company has been recognized as one of America's Fastest-Growing Cybersecurity Companies by Inc. 5000 and a multi-year Inc. Best Workplace awardee.
As a Cybersecurity GRC Analyst, you will support the governance, risk, compliance, and customer trust programs that enable security-conscious enterprises, regulated industries, and government customers to adopt Semperis cloud products with confidence. This is a hands-on, learning-focused role where you'll start with well-defined tasks and progressively take on more complex work as you develop expertise.
Key responsibilities include:
**Security Awareness Training:** Lead the annual Security and Compliance Training campaign by coordinating with People Operations and Legal on curriculum, managing enrollments, tracking completion, and handling training exceptions. Maintain training records as audit evidence and gather feedback for continuous improvement.
**Customer Trust:** Answer customer security questionnaires with increasing complexity over your first few months. Verify answer accuracy, confirm NDAs before sharing sensitive information, and help maintain the answer library and Trust Center content.
**Audit and Compliance Support:** Gather and organize evidence for SOC 2 and ISO 27001 audits, ensuring it meets audit requirements. Learn and support the FedRAMP program as needed, working alongside the FedRAMP ISSO.
**Governance and Risk Support:** Coordinate security policy updates through review and approval workflows, publish approved versions, and maintain version history. Support vendor risk management by tracking annual recertifications and sending information requests. Provide administrative support for the cyber risk register and identify opportunities to automate manual tasks using the Vanta GRC platform.
You'll work in a small, collaborative team where you'll gain exposure to every aspect of GRC. Experienced teammates will review your work and support you as you learn new areas. The role emphasizes organization, responsiveness, and clear communication to make it easier for control owners to provide what audits and customers need.
The hybrid work model includes up to three days per week in the Hoboken office with flexibility to work remotely the remaining days.
**Requirements:**
- One of the following: CISA, CRISC, or CISSP certification, OR a degree in Cybersecurity
- At least 6 months of experience in a GRC role
- Strong organization, attention to detail, and follow-through on deadlines
- Clear written and verbal communication skills
- Working knowledge of Microsoft 365 and Excel, and comfort using AI-assisted tools
**Preferred Qualifications:**
- 2 to 3 years of work experience in IT, cybersecurity, or GRC
- Exposure to SOC 2, ISO 27001, or FedRAMP audits in a supporting role or as an auditee
- Experience with a modern GRC platform such as Vanta
- Experience answering customer security questionnaires
- Experience at a SaaS, cloud, or cybersecurity company
Note: No sponsorship will be provided for this role. Candidate must be eligible to work in the United States.
