Senior GRC Analyst
VulnU
- Senior GRC AnalystSemperis · semperis.comCategory: GRC & ComplianceLocation: RemoteLevel: SeniorAt Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX About the RoleWe protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently. What You Will DoComplianceWork with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.Customer TrustOwn customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.Remediation Follow ThroughDrive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.Policy and GovernanceOwn the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.Team Coverage and Continuous ImprovementBack up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.Help define and report KPIs and KRIs, and support the cyber risk register.Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.Support our security awareness training program.What You Will Bring (Required)5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.SOC 2 Type II and ISO 27001 audit and attestation experience.Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.A track record of getting results through influence with engineers and other stakeholders who don't report to you.Preferred QualificationsHands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.Experience automating control monitoring and evidence collection (\"compliance as code\").Experience answering customer security questionnaires at scale with AI-assisted tools.GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.Success Measures (First Year)In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.Control owners consistently meet evidence and remediation deadlines without needing escalation.Our policy set is current, approved, and ready for audit.You deliver at least one measurable automation or process improvement that reduces manual work for the team.You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.Additionally, this position requires the following:• U.S. citizenship. #LI-MR1Why Join Semperis?You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.\\*\\*Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.
- J-18808-Ljbffr VulnU
Vacancy posted 3 days ago
Similar jobs that could be interesting for youBased on the Senior GRC Analyst in Hoboken, NJ vacancy
- ...Yahoo is seeking a Senior Security GRC Analyst to join The Paranoids Cyber Risk team in a fast-moving security landscape. You will collaborate with business leaders, engineers, and security teams to identify, assess, document, and communicate security risks, guiding risk...Senior
Yahoo
Brooklyn, NY1 day ago - ...CONNECTICUT /or SHORT HILLS NEW JERSEY Optomi, in partnership with a leading provider in the insurance industry is seeking a Sr. GRC Analyst that will establish governance, risk, compliance, vendor risk, and vulnerability management activities with increasing...Senior
Optomi
Short Hills, NJ5 days ago - ...Stradit LLC in Jersey City seeks a senior quantitative analyst to maintain and enhance in-house fixed income risk models and to design performance metrics and reports for internal users and external supervisors. You will independently format and validate analysis results...Senior
Stradit
Jersey City, NJ4 days ago - ...entrepreneurial spirit of a startup, we’re hiring. SageSure, a leader in catastrophe-exposed property insurance, is seeking a Senior Catastrophe Risk Analyst. In this role, you’ll play a critical part in advancing the scientific, statistical, and model-based understanding of...SeniorLive in
SageSure
Jersey City, NJ2 days ago - ...The Port Authority of New York & New Jersey is seeking a Senior Principal Engineer to lead the Engineering Department's consultant services programs. Based in Jersey City, NJ, this role focuses on planning, administration, and delivery of professional services supporting...Senior
The Port Authority of New York & New Jersey
Jersey City, NJ1 day ago - ...Senior Director, Regulatory Affairs - Northern NJ (Hybrid) Client is seeking a capable, insightful, experienced Senior Director, Regulatory Affairs Position Summary: The Senior Director, Regulatory Affairs is responsible for providing subject matter expertise...Senior
Clinical Dynamix, Inc.
Jersey City, NJ3 days ago - ...JPMorgan Chase & Co. in New Jersey seeks an Employee Conduct Senior Associate to strengthen Global Anti-Corruption Compliance and Anti-Trust programs. You will lead risk assessments, governance, analytics, monitoring, and reporting, partnering with Compliance, Analytics...Senior
Aumni
Jersey City, NJ2 days ago - ...seeking a Principal Architect for Infrastructure Platform Client Solutions. You will guide cloud and infrastructure strategy, influence senior stakeholders, and shape roadmaps across private and public clouds to meet security, resilience, and regulatory requirements. The...Senior
Testing Site - JPMC
Jersey City, NJ2 days ago - Yablon & Associates LLC in New York seeks a Risk Data Quality Control Consultant to join the Risk Market Data team. The role centers on data quality operations across market and counterparty risk, ensuring timely reporting and remediation of weaknesses on a 6+ month contract...SeniorDaily paidFull timeContract work
Yablon & Associates
Jersey City, NJ3 days ago - ...Senior Regulatory Affairs SpecialistA Few Words About Us Integrated Resources, Inc is a premier staffing firm recognized as one of the tri-states most well-respected professional specialty firms. IRI has built its reputation on excellent service and integrity since its...Senior
Careers Integrated Resources Inc
Jersey City, NJ4 days ago $90.8k - $136.2k
Qualifications ~5+ years of related business analysis experience. ~ Genuine curiosity about how a technology solution provider and a partner reseller business actually operate, since you’ll need to build working expertise in both to write requirements that hold up ...SeniorFull timeFlexible hoursShift workWorld Wide Technology
Jersey City, NJ3 days ago- IFG Companies seeks a Risk Management Actuary to support enterprise risk management, pricing adequacy and reinsurance decisions. The role emphasizes portfolio risk evaluation, data-driven insights and collaboration with underwriting and leadership. Hybrid work is offered...SeniorRemote work
IFG Companies
Jersey City, NJ1 day ago - ...Check Point is seeking a senior cybersecurity professional to manage daily incident response for customers, conduct forensic analysis of compromised systems, and guide remediation efforts. You will lead complex, global incidents, perform large-scale compromise assessments...Senior
Check-Point-Software-Technologies-2
Jersey City, NJ3 days ago $159k - $199k
...Senior Actuarial Advisor - Commercial Liability Looking to join a growing company with a solid foundation? A leading insurance partner is seeking a customer-facing product expert who will help innovate and enhance Commercial General Liability & Excess/Umbrella actuarial...SeniorFull timeDW Simpson Global Actuarial & Analytics Recruitment
Jersey City, NJ2 days ago$96.4k - $144.6k
Qualifications Bachelor’s Degree; preferably in Business, IT, Accounting, MIS, Finance, or a related field. Minimum 6 years of functional experience with Oracle ERP Applications, including Oracle EBS R12 and/or Oracle Cloud Financials, with a focus on the Procure...SeniorFull timeRemote workFlexible hoursShift workWorld Wide Technology
Jersey City, NJ3 days ago$105.4k - $207.8k
Position Summary Cyber Security & Risk Strategy Senior Consultant Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing...SeniorLocal areaVisa sponsorshipDeloitte
Jersey City, NJ1 day ago- ...Position Overview Our client, a prestigious and top-ranked AmLaw firm, is seeking a Senior Revenue Analyst to join its Client Accounting team in NYC on a hybrid basis (2 days onsite, 3 days remote). This role offers the opportunity to support the monthly forecasting...SeniorWork experience placementRemote work
Coda Search│Staffing
Jersey City, NJ2 days ago - Job-ID: 3604Category: ActuarialLocation: Jersey City, NJ, United StatesWorkplace: HybridSchedule: Full timePosted: 2026-09-23Short Term Incentive: YesLong Term Incentive: NoCommission: NoWork Arrangement: HybridBudgeted Salary Currency: USDMinimum Salary: 159,200Maximum...SeniorWork at office
Verisk Analytics
Jersey City, NJ4 days ago - ...regulatory standards. FR&G works to manage these risks within defined risk tolerances under delegated authority approved by the Board and senior management. FR&G collaborates closely with Quantitative Risk Management and the Counterparty Credit Risk teams to maintain an...SeniorRemote workFlexible hours
The Depository Trust & Clearing Corporation
Jersey City, NJ2 days ago $91k - $169k
...; HOBOKEN, NJ; BELLEVUE, WASalary: $91000 - $169000/yearType: Regular/PermanentCompany: WalmartJob DescriptionRole summary:The Senior Analyst, Strategic Account Management, plays a critical role in driving business growth through comprehensive account planning, sales forecasting...SeniorFull timeTemporary workPart timeWalmart
Hoboken, NJ2 days ago- ...analytics, and market knowledge to evaluate portfolio positioning, assess trade-offs, and provide insights to Portfolio Managers and Senior Management. Depth of understanding of the credit markets and key investment risk concepts is critical. The candidate should have...SeniorVisa sponsorshipWork visaShift work
Octagon Credit Investors
Jersey City, NJ4 days ago - ...BPCE Equipment Solutions in Jersey City seeks a Senior Documentation Specialist to manage contract lifecycles and funding packages for syndicated lending. You will collaborate with Sales, Credit, and Finance to ensure accuracy, timely funding, and risk mitigation through...SeniorContract work
Groupe BPCE
Jersey City, NJ5 days ago - ...Immediate Hiring | Futures & Derivatives Clearing Senior Analyst | Jersey City, NJ (Hybrid) | Apply Now! The bank is seeking an experienced Futures & Derivatives Clearing Senior Analyst to support futures and derivatives clearing operations for a global institutional...SeniorFull timeWork at officeImmediate start3 days per week
Kelly
Jersey City, NJ2 days ago - ...Trade Management Senior Analyst – Futures & Derivatives We are seeking a Senior Trade Management Analyst with 7+ years of experience in Futures/Derivatives Operations to support institutional trading activity within a global financial services environment....SeniorFull time
Kelly
Jersey City, NJ2 days ago - ...backbone of DTCC, leaders who stand at the forefront of DTCC’s competitive endeavors across the globe. From accountants and financial analysts to internal consultants and workplace designers, the CFO Organization employs diverse individuals who work together to help make...Full timeRemote workFlexible hours
DTCC
Jersey City, NJ1 day ago - ...Lord Abbett is expanding its Investment Grade credit research team by adding a Research Analyst to cover Investment Grade corporate credits within the Industrials Sector. This role will generate investment ideas for the $55 billion Investment Grade corporates franchise...Senior
Lord Abbett
Jersey City, NJ4 days ago $159k - $199k
...Job Description Senior Actuarial Advisor - Commercial Liability \n \n Looking to join a growing company with a solid foundation? A leading insurance partner is seeking a customer-facing product expert who will help innovate and enhance Commercial General Liability...SeniorDW Simpson Global Actuarial & Analytics Recruitment
Jersey City, NJ4 days ago$49 per hour
...BSA and Data Analysis skills focused on integration work Strong SQL experience Financial Services experience Senior Systems Technical Analyst (Integration Focus) Job Description:\n \n We are seeking a Senior Systems Technical Analyst with a strong focus on...SeniorContract workWork at officeYoh, A Day & Zimmermann Company
Jersey City, NJ7 days ago- ...You’re a pro who wants to influence the future of technical architecture and our team is looking for people like you. As a Senior Principal Architect at JPMorganChase within the CorporateTechnology's Enterprise Architecture team, you will work across teams to implement...Senior
Testing Site - JPMC
Jersey City, NJ2 days ago - ...Senior Actuarial Analyst (Manager/Sr. Manager)Jersey City, New Jersey, United StatesAbout the JobJob Summary:We are seeking an experienced Sr. Actuarial Analyst to join our team, focusing on risk monitoring, profitability analysis, and other key actuarial functions. This...Senior
Inizio Partners
Jersey City, NJ3 days ago
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior GRC Analyst. Be the first to apply!
Related searches
- senior manager accounts payable Hoboken, NJ
- senior cloud service delivery manager Hoboken, NJ
- senior software design engineer Hoboken, NJ
- senior part time Hoboken, NJ
- senior sales manager Hoboken, NJ
- srs Hoboken, NJ
- senior project manager contract Hoboken, NJ
- senior business analyst contract Hoboken, NJ
- senior information technology project manager Hoboken, NJ
- senior compensation manager Hoboken, NJ