Build and operate the governance, risk, and compliance program across SOC 2, NIST CSF, ISO 27001, and related frameworks. Manage audits, control libraries, risk registers, policies, vendor assessments, due diligence, and compliance monitoring. Configure automated evidence collection through APIs, query compliance data using SQL, validate control effectiveness, coordinate remediation, and report risk posture to leadership. Partner with auditors, security, engineering, business teams, customers, and prospects while automating manual GRC workflows.

The Senior SOC Analyst monitors and investigates security incidents, manages vulnerabilities, analyzes security data, and leads investigations to improve security posture.