GRC Analyst I, SOC 2 (Platform)
Summary
Assesses clients' security controls for SOC 2 and ISO 27001 compliance, testing cloud and IT environments while documenting findings and recommending improvements.
The GRC Analyst I supports clients undergoing SOC 2, ISO 27001, and related cybersecurity compliance assessments. This role focuses on evaluating security controls within cloud-based and technology-driven environments, including infrastructure, applications, software development practices, and information security programs. The ideal candidate possesses a foundational understanding of cybersecurity concepts, cloud technologies, and technology risk management. They are interested in helping innovative technology companies strengthen their control environments while developing expertise in cybersecurity assurance and compliance.
- Assist in the execution of SOC 2 examinations, readiness assessments, and other cybersecurity compliance engagements.
- Observe, document, and test controls related to:
- Identity and Access Management (IAM)
- Change Management
- Vulnerability Management
- Incident Response
- Security Monitoring
- Backup and Recovery
- Vendor Management
- Risk Management
- Review and evaluate security policies, standards, and procedures.
- Assess the design and operating effectiveness of IT and security controls.
- Perform testing of logical access controls across cloud and business applications.
- Document client control environments and supporting evidence.
- Develop an understanding of client technology environments, including:
- AWS
- Azure
- Google Cloud Platform (GCP)
- SaaS applications
- Infrastructure and networking concepts
- Review software development lifecycle (SDLC) processes and change management controls.
- Evaluate cloud security controls and supporting configurations.
- Assist with documenting system architecture, data flows, and integrations.
- Build and maintain strong client relationships.
- Communicate findings and recommendations clearly and professionally.
- Participate in client meetings and walkthroughs.
- Support clients in understanding remediation opportunities and compliance expectations.
Foundational knowledge of:
- Cloud computing
- Networking
- Cybersecurity principles
- Information security controls
- Strong written and verbal communication skills.
- Strong analytical and problem-solving abilities.
- Ability to manage multiple priorities and deadlines
Familiarity with:
- AWS, Azure, or GCP
- SIEM solutions
- Vulnerability management solutions
- Security operations concepts
Educational Preferences:
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field.
There are many reasons to join the Sensiba team: market-leading leave entitlements, competitive compensation, professional advancement opportunities, and above all — our people. If you're looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work, apply today!
Sensiba has a robust offering of benefits, including:
Sensiba has a robust offering of benefits, including:
- Market-Leading Annual Leave – We offer 30 days of paid annual leave (10 days above the Irish statutory minimum), plus an additional 5 days of paid leave for our firm's mid-year shutdown in July. You will also have access to personal/carer's leave, parental leave, and volunteer days.
- Pension Scheme – Plan for your future with our company-supported pension program.
- Flexible & Remote Work – We are a remote-first firm. Enjoy the flexibility of working from home, with WeWork subscriptions and access to local office hubs available for those who value face-to-face collaboration.
- Performance-Based Bonus – Recognition for your contributions through our annual discretionary bonus program.
- Professional Development – We invest in your expertise through tuition reimbursement, support for professional certifications (ACA, ACCA, CPA etc.), and dedicated mentorship.
- Tech of Your Choice – We offer your choice of a high-spec Mac or PC setup.
- Inclusive & Supportive Culture – DEI initiatives, employee resource groups, and comprehensive wellness programs.