Cybersecurity GRC Analyst

Semperis

. Follow up on overdue security training .

Posted 10/22/2026full-timeHoboken • New Jersey • United StatesJuniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security and Compliance Training, including managing training campaigns, coordinating with stakeholders, and maintaining audit records. Proficient in GRC processes, with a strong focus on SOC 2, ISO 27001, and FedRAMP compliance.

Highest-signal resume keywords

CISA CertificationGRC ExperienceSOC 2 ComplianceISO 27001 ComplianceVanta Platform Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Training ManagementAudit Evidence GatheringTraining Curriculum CoordinationQuestionnaire Accuracy VerificationPolicy Review Coordination

Soft Skills

Strong OrganizationAttention to DetailClear Communication

Tools & Technologies

Microsoft 365ExcelAI-Assisted Tools

Certifications & Qualifications

CISACRISCCISSP

Industry Keywords

CybersecurityGRCFedRAMPSOC 2ISO 27001SaaSCloud

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Follow up on overdue security training
Lead the annual Security and Compliance Training campaign
Coordinate with People Operations and Legal on training curriculum
Set up training enrollments, track completion weekly, and escalate overdue training
Handle training exceptions and maintain training records as audit evidence
Gather feedback to improve future training campaigns
Answer customer security questionnaires and escalate complex requests
Check questionnaire answers for accuracy and confirm requestors are under NDA
Maintain the answer library and Trust Center content
Learn the FedRAMP program and support the FedRAMP ISSO
Gather and organize evidence for SOC 2 and ISO 27001 audits
Confirm audit evidence meets requests and prepare it for auditor review
Coordinate security policy reviews, approvals, publication, version history, and change records
Recommend improvements to team processes, status reporting, and priorities
Track annual recertification of critical vendors and send information requests
Provide administrative support for the cyber risk register
Use Vanta and identify opportunities to automate manual tasks and evidence collection

Requirements

What you’ll need

One of the following: a CISA, CRISC, or CISSP certification, or a degree in Cybersecurity
At least 6 months of experience in a GRC role
Strong organization, attention to detail, and follow-through on deadlines
Clear written and verbal communication skills
Working knowledge of Microsoft 365 and Excel
Comfort using AI-assisted tools
No sponsorship will be provided; candidate must be eligible to work in the country in which they apply
Preferred: 2 to 3 years of work experience in IT, cybersecurity, or GRC
Preferred: exposure to SOC 2, ISO 27001, or FedRAMP audits
Preferred: experience with a modern GRC platform such as Vanta
Preferred: experience answering customer security questionnaires
Preferred: experience at a SaaS, cloud, or cybersecurity company

Benefits

Comp & perks

Purpose-driven employee experience rooted in growth and balance
Hybrid work model: up to three days per week in the office and remaining days remotely
Professional learning and development alongside experienced GRC, security, and engineering professionals
AI and GRC tooling, including Vanta
Reasonable accommodation for applicants with disabilities