SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 130,000 - 155,000 / annual
Crusoe is a vertically integrated AI infrastructure company building energy-efficient solutions to power the world's most ambitious AI workloads. The company owns and operates each layer of the stack—from electrons to tokens—to accelerate the abundance of energy and intelligence.
As Senior GRC Analyst reporting to the Head of GRC, you will own and drive day-to-day execution of Crusoe's Governance, Risk, and Compliance program. You'll be the operational engine behind continuous compliance, managing audit cycles, maintaining policies and standards, responding to customer security inquiries, and driving improvements across the GRC platform.
Key responsibilities include:
**Audit & Controls:** Apply SOX audit expertise to design, operate, and test IT general controls (ITGCs) including access management, change management, and computer operations. Evaluate in-scope systems to identify SOX control gaps and partner with control owners across IT, Finance, and Engineering to drive remediation. Collect and organize audit evidence for SOX, SOC 2, ISO 27001, HIPAA, and other frameworks. Serve as day-to-day contact for internal and external auditors.
**Compliance Operations:** Own coordination and completion of User Access Reviews (UARs) across in-scope systems on recurring schedules. Maintain and update organizational security policies and standards. Conduct third-party security assessments and support vendor contract reviews for compliance alignment.
**Customer Trust:** Respond to customer security questionnaires and due diligence requests within SLAs. Maintain and update the Security Diligence Playbook for consistent, accurate responses.
**GRC Platform & Automation:** Drive enhancements within the GRC tool including asset management, integrations, test configurations, and control mapping. Identify opportunities to streamline and automate repetitive workflows. Apply AI and LLM-based tools to improve productivity—accelerating questionnaire responses, summarizing audit evidence, and drafting policy updates. Track and report compliance metrics and control health.
You'll operate independently, take ownership of full audit cycles, and partner confidently with stakeholders across IT, Security, Finance, and Engineering. The ideal candidate is proactive, detail-oriented, and brings a mindset for efficiency, leveraging AI tools and automation to scale impact.
**Requirements:**
- 5–7 years of experience in GRC, information security, IT audit, or related compliance role with demonstrated ownership of end-to-end audit cycles
- Practical knowledge of compliance frameworks: SOC 2, ISO 27001, HIPAA, NIST CSF
- Solid understanding of SOX 404 audit requirements and IT general controls with hands-on experience identifying control gaps and remediating them
- Hands-on experience with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar)
- Experience conducting user access reviews, vendor risk assessments, and internal audits
- Familiarity with responding to customer security questionnaires and managing trust center content
- Comfort using AI tools (Gemini, Claude, Copilot) to accelerate work and improve operational efficiency
- Strong written and verbal communication skills; ability to translate compliance requirements for technical and non-technical audiences
- Ability to influence control owners without direct authority
- Highly organized, self-directed, able to manage multiple priorities and stakeholders independently
- Detail-oriented with strong follow-through on recurring operational tasks
**Bonus qualifications:**
- Certifications: CISA, CRISC, CISSP, Security+, or ISO 27001 Lead Auditor
- Background from public accounting and/or high-growth technology companies navigating SOX compliance
- Experience with cloud environments (GCP preferred; AWS/Azure helpful)
- Familiarity with financial systems (ERP, billing, revenue recognition platforms)
- Experience with policy management and security awareness training platforms
- Familiarity with AI risk assessment frameworks and emerging AI governance practices
- Experience mentoring junior analysts or leading cross-functional compliance initiatives
