Cybersecurity GRC Analyst
At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
About the Role
We protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the certification and audit programs that let security-conscious enterprises, regulated industries, and government customers adopt our cloud products with confidence.
As our Cybersecurity GRC Analyst, you'll support the team across governance, risk, compliance, and customer trust work, and you'll own our annual security awareness training campaign. This is a hands-on, learning-focused role: you'll start with well-defined tasks and take on more complex work as you learn our programs.
We are a small team, so you'll get exposure to every part of GRC. In your first year, you'll gather audit evidence for SOC 2 and ISO 27001, answer customer security questionnaires, coordinate policy updates, and support our vendor risk and FedRAMP work. Experienced teammates review your work and are there to help when something is new or complex. You'll also have AI and GRC tooling, including Vanta, to help you work efficiently.
You'll succeed by being organized, responsive, and easy to work with, making it simpler for control owners to provide what audits and customers need.
+++No sponsorship will be provided for this role. Candidate must be eligible to work in the country in which you apply+++
What You Will Do
Security Awareness Training
- Follow up on overdue security training, then lead the annual Security and Complian...