Senior GRC Analyst
Role Overview
Own day-to-day execution of the Governance, Risk, and Compliance program across security and privacy frameworks.
The role reports to the Head of GRC and partners with IT, Security, Finance, and Engineering.
The senior team member is expected to work independently and own full audit cycles.
Key Skills for This Role
Full Job Posting
About Crusoe
Crusoe describes itself as a vertically integrated AI infrastructure company spanning energy, data center construction, and cloud services.
About the Role
Own day-to-day execution of the Governance, Risk, and Compliance program across security and privacy frameworks.
The role reports to the Head of GRC and partners with IT, Security, Finance, and Engineering.
The senior team member is expected to work independently and own full audit cycles.
Audit and Controls
- Support SOX IT general control design, operation, and testing, including access management, change management, and computer operations.
- Maintain control documentation, process narratives, and risk-control matrices; identify gaps and drive remediation through closure.
- Collect and deliver audit evidence for SOX, SOC 2, ISO 27001, HIPAA, and other frameworks.
- Coordinate auditor requests, facilitate walkthroughs, and respond to evidence and documentation requests.
Compliance Operations
- Coordinate recurring user access reviews across in-scope systems and applications, including systems supporting financial reporting.
- Maintain security policies and standards; conduct third-party security assessments and support vendor contract reviews.
Customer Trust and GRC Platform
- Respond to customer security questionnaires and due diligence requests; maintain the Security Diligence Playbook.
- Improve GRC platform asset management, integrations, testing, control mapping, workflows, and risk objects.
- Streamline repetitive workflows and apply AI and LLM tools to compliance operations.
- Track and report compliance metrics and control health to GRC leadership.
Qualifications
- 5–7 years of experience in GRC, information security, IT audit, or related compliance work.
- Demonstrated ownership of end-to-end audit cycles.
- Practical knowledge of frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF.
- The provided description ends mid-qualification; additional requirements are unavailable.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at CRUSOE
Lead Financial Analyst, Manufacturing
Sunnyvale, USA
Crusoe is seeking a hands-on lead analyst to own financial planning, modeling, and reporting for its Manufacturing business. The role builds planning cycles and KPIs, partners across finance and operations, and supports
Senior Financial Analyst, Central Finance
Denver, USA
Crusoe is seeking a Senior Financial Analyst to support corporate finance initiatives across finance, strategy, and operations. The role builds financial models, drives budgeting and forecasting, and delivers executive r
Senior Financial Analyst, Central Finance
Seattle, USA
Crusoe is seeking a Senior Financial Analyst to support corporate finance, planning, forecasting, performance reporting, and finance systems across the organization. Candidates need two to four years of relevant finance