Cybersecurity GRC Analyst

Semperis

. Follow up on overdue security training .

Posted 10/22/2026full-timeAustin • Texas • United StatesJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security and Compliance Training, with a strong focus on audit preparation for SOC 2 and ISO 27001. Proficient in managing training records, vendor information requests, and utilizing GRC platforms like Vanta to enhance operational efficiency.

Highest-signal resume keywords

CISA CertificationSOC 2 Audit ExperienceISO 27001 Audit ExperienceGRC Role ExperienceMicrosoft 365 Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Training CoordinationAudit Evidence GatheringVendor Information ManagementTraining Record MaintenanceQuestionnaire Accuracy VerificationProcess Improvement RecommendationsCurriculum CoordinationTraining-Platform Enrollment ManagementCompliance DocumentationEvidence Collection Automation

Soft Skills

Strong OrganizationAttention to DetailClear Communication

Tools & Technologies

VantaMicrosoft 365ExcelAI-Assisted Tools

Certifications & Qualifications

CISACRISCCISSPDegree in Cybersecurity

Industry Keywords

GRCCybersecurityFedRAMPSaaSCloud

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Follow up on overdue security training
Lead the annual Security and Compliance Training campaign
Coordinate curriculum with People Operations and Legal
Set up training-platform enrollments and track completion weekly
Escalate overdue training and handle training exceptions
Maintain training records as audit evidence and gather feedback
Answer customer security questionnaires and escalate complex requests
Check questionnaire answers for accuracy and confirm requestors are under NDA
Maintain the answer library and Trust Center content
Learn the FedRAMP program and support the FedRAMP ISSO
Gather and organize evidence for SOC 2 and ISO 27001 audits
Confirm audit evidence meets requests and prepare it for review
Coordinate security policy reviews, approvals, publication, version history, and change records
Recommend improvements to processes, status reporting, and work priorities
Track annual recertification of critical vendors and send vendor information requests
Provide administrative support for the cyber risk register
Use Vanta and identify opportunities to automate manual tasks and evidence collection

Requirements

What you’ll need

One of the following: a CISA, CRISC, or CISSP certification, or a degree in Cybersecurity
At least 6 months of experience in a GRC role
Strong organization, attention to detail, and follow-through on deadlines
Clear written and verbal communication skills
Working knowledge of Microsoft 365 and Excel
Comfort using AI-assisted tools
Preferred: 2 to 3 years of work experience in IT, cybersecurity, or GRC
Preferred: Exposure to SOC 2, ISO 27001, or FedRAMP audits
Preferred: Experience with a modern GRC platform such as Vanta
Preferred: Experience answering customer security questionnaires
Preferred: Experience at a SaaS, cloud, or cybersecurity company
Must be eligible to work in the country in which you apply; no sponsorship will be provided

Benefits

Comp & perks

Employee experience focused on purpose, growth, and balance
Learning-focused role with exposure to every part of GRC
Experienced teammate support and review
AI and GRC tooling, including Vanta
Hybrid work model: up to three days per week in the office and remaining days remotely
Equal employment opportunity and reasonable accommodation support