The Senior GRC Auditor I is responsible for ensuring client satisfaction and efficient execution of engagement plans, while serving as a coach and advisor to team members. This role focuses on IT controls, security, and compliance across SOC 2 and SOC 1 engagements, as well as broader risk and assessment services.

Responsibilities

include evaluating, testing, and documenting controls related to security, availability, processing integrity, and key business processes, including access management, change management, and system operations. This role works across both platform-enabled (e.g.

, Drata, Vanta) and traditional audit environments, requiring adaptability in leveraging automated evidence as well as performing manual audit procedures. The Senior GRC Auditor I will build strong client relationships through a deep understanding of client systems, technology environments, and compliance

Requirements

, while effectively communicating audit findings and recommendations. Knowledge of relevant regulations and industry standards (e.g.

, SSAE 18/SOC, HIPAA, ISO-27001, COSO, HITRUST, etc.) and best practices and methodologies to address these

Fundamental understanding of audit principles such as risk assessment, materiality, independence, and sufficiency of evidence - ability to apply these

to organizational internal control frameworks Understanding of technical concepts such as cyber security, virtualization, data center, cloud computing, and the like Ability to interpret/relay technical information at all levels of technical aptitude, including senior management. This includes written and oral communications Documentation skills are a must. Ability to articulate, write and present information in a clear and understandable manner and to meet the performance standard required for supporting our audit work Strong time management, project management and organizational skills with the ability to manage multiple priorities successfully within a deadline-driven environment Bachelor’s degree required 3+ years of IT Audit experience or Audit experience Experience leading SOC 1 & SOC 2 audits Experience with controls reviews along with recommending, designing and advising on applicable IT controls Bachelor’s degree in MIS, IT or related field preferred Experience teaching, training, mentoring other staff members is preferred Relevant professional designation such as CISA, CISSP, CIPP, etc.

is a plus Experience with SOC 2 readiness platforms (e.g., Drata, Vanta, etc.

) is preferred Experience leading SOC 1s and developing SOC 1 controls around financial reporting and business processing This role offers a competitive base salary along with a comprehensive

Benefits

package. Salary ranges for U.S.

-based positions are determined by geographic location and fall into one of three pay zones, which reflect the cost of labor in that area. The anticipated salary ranges for this position are outlined below and are subject to change: US Payzone 1: $80,800 - $101,000 US Payzone 2: $73,600 - $92,000 US Payzone 3: $66,400 - $83,000 When determining

, competitive

, including: Comprehensive Health Coverage – Medical, dental, and vision. Retirement & Financial Planning Support – 401(k) with match, financial wellness programs. Generous Paid Time Off – Vacation, sick time, holidays, parental leave and volunteer days.

Flexible Work Arrangements – Hybrid or remo

Compensation

, we consider a variety of factors such as a candidate’s professional experience, skills, and

, professional advancement opportunities, and above all — our people. If you're looking for an environment that offers you growth, success, and professionalism without compromising your family, passions, and life outside of work, apply today! Sensiba has a robust offering of

Qualifications

Please note that final offer amounts may vary from the ranges listed above and may be adjusted over time. There are many reasons to join the Sensiba team: generous

Senior GRC Analyst I, SOC 1 & SOC 2

Benefits