Cybersecurity GRC Analyst

Semperis

. Follow up on overdue security training .

Posted 10/22/2026full-timeDallas • Texas • United StatesJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security and Compliance Training, including managing training campaigns, maintaining audit evidence, and coordinating with cross-functional teams. Proficient in GRC processes, with a strong focus on SOC 2, ISO 27001, and FedRAMP compliance.

Highest-signal resume keywords

CISA CertificationGRC ExperienceSOC 2 Audit KnowledgeISO 27001 Audit KnowledgeVanta Platform Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Training ManagementAudit Evidence PreparationTraining Curriculum CoordinationVendor Information TrackingProcess Improvement Recommendations

Soft Skills

Strong OrganizationAttention to DetailClear Communication

Tools & Technologies

Microsoft 365ExcelAI-Assisted ToolsVanta

Certifications & Qualifications

CISACRISCCISSPDegree in Cybersecurity

Industry Keywords

GRCCybersecurityFedRAMPSOC 2ISO 27001SaaSCloud

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Follow up on overdue security training
Lead the annual Security and Compliance Training campaign
Coordinate with People Operations and Legal on training curriculum
Set up training enrollments, track weekly completion, and escalate overdue training
Handle training exceptions and maintain training records as audit evidence
Gather feedback to improve future training campaigns
Answer customer security questionnaires and escalate complex requests
Check questionnaire answers for accuracy and confirm requestors are under NDA
Maintain the answer library and Trust Center content
Learn the FedRAMP program and support the FedRAMP ISSO
Gather, organize, verify, and prepare SOC 2 and ISO 27001 audit evidence
Coordinate security policy reviews, approvals, publication, version history, and change records
Recommend improvements to processes, status reporting, and work priorities
Track annual recertification of critical vendors and send vendor information requests
Provide administrative support for the cyber risk register
Use Vanta and identify opportunities to automate manual tasks and evidence collection

Requirements

What you’ll need

One of the following: a CISA, CRISC, or CISSP certification, or a degree in Cybersecurity
At least 6 months of experience in a GRC role
Strong organization, attention to detail, and follow-through on deadlines
Clear written and verbal communication skills
Working knowledge of Microsoft 365 and Excel
Comfort using AI-assisted tools
Preferred: 2 to 3 years of work experience in IT, cybersecurity, or GRC
Preferred: exposure to SOC 2, ISO 27001, or FedRAMP audits
Preferred: experience with a modern GRC platform such as Vanta
Preferred: experience answering customer security questionnaires
Preferred: experience at a SaaS, cloud, or cybersecurity company
Must be eligible to work in the country in which you apply
No sponsorship will be provided

Benefits

Comp & perks

Employee experience focused on purpose, growth, and balance
Hybrid work model: up to three days per week onsite and remaining days remotely
AI and GRC tooling, including Vanta
Learning and professional growth opportunities across GRC, security, and engineering
Exposure to more complex customer trust, policy, risk, and FedRAMP work
Equal employment opportunity and reasonable accommodation support