Sensiba

Accounting, tax, and consulting for growth

GRC Analyst 2 - SOC

Security Governance, Risk & CompliancePosted on Nov 10

Full-timeRemote in AustraliaA$70k - A$87k /yr

About the Job

Requirements

A bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field is required.
At least 1 year of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles is required.
Experience conducting SOC 1 or SOC 2 audits is required.
Professional proficiency in written and spoken English, including the ability to communicate clearly and effectively with clients, colleagues, and leadership, is required.

Responsibilities

Conduct detailed external audits of clients’ business processes and IT controls to ensure compliance with industry standards and regulations.
Observe, review, document, and test key business process transactions, access controls, change management controls, operational and organizational controls, and automated controls for engagements.
Review, document, evaluate, and test application controls, particularly automated controls, across systems, software applications, and client business processes.
Evaluate clients’ business, IT, and security risks, identify areas of concern, and recommend control measures and process improvements to mitigate risks.
Assess security policies and procedures; review risk management and risk assessment documentation; and assess controls for clients’ business applications, networks, operating systems, and other technology infrastructure.
Support internal and external security assessments of new and existing services and infrastructure, including operational, regulatory, and contractual requirements.
Develop and nurture strong client relationships, gaining insight into their businesses, risks, and compliance.
Ensure client satisfaction and efficient execution of engagement plans while coaching and advising team members.
Communicate audit findings and recommendations to clients.

Desired Qualifications

A relevant professional designation such as CISA, CISSP, or CIPP is preferred.
Experience with SOC readiness platforms such as Drata or Vanta is preferred.

The GRC Auditor II is responsible for ensuring client satisfaction and efficient execution of engagement plans, while serving as a coach and advisor to team members. This role focuses on IT controls, security, and compliance across SOC engagements, as well as broader risk and assessment services. Responsibilities include evaluating, testing, and documenting controls related to security, availability, processing integrity, and key business processes, including access management, change management, and system operations.

This role works across both platform-enabled (e.g., Drata, Vanta) and traditional audit environments, requiring adaptability in leveraging automated evidence as well as performing manual audit procedures. The Senior GRC Auditor I will build strong client relationships through a deep understanding of client systems, technology environments, and compliance requirements, while effectively communicating audit findings and recommendations.

Only candidates located in Australia will be considered at this time.

Conduct detailed external audits of clients' business processes and IT controls, ensuring compliance with industry standards and regulations.
Observe, review, document, and test key business process transactions, access controls, change management controls, operational and organizational controls, and automated controls for engagements.
Review, document, evaluate and test application controls, particularly automated controls on a wide range of systems and software applications across a wide variety of client business processes.
Evaluate clients' business, IT, and security risks, identifying areas of concern and recommending appropriate control measures and process improvements to mitigate risks.
Assess security policies and procedures, reviewing risk management / risk assessment documentation, and controls of our clients’ business applications, networks, operating systems, and other components of their technology infrastructure.
Support internal and external security assessments of new and existing services and infrastructure including operational, regulatory, and contractual requirements.
Develop and nurture strong relationships with clients, gaining insight into their businesses, risks, and compliance.

Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
1+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles.
Experience conducting SOC 1/2 audits.
Relevant professional designation such as CISA, CISSP, CIPP, etc. is a plus.
Experience with SOC readiness platforms (e.g., Drata, Vanta, etc.) is preferred.
Professional proficiency in written and spoken English, including the ability to communicate clearly and effectively with clients, colleagues, and leadership.

About the Company

Sensiba

Accounting, tax, and consulting for growth

Sensiba provides accounting, tax, and consulting services to businesses and individuals. It helps clients solve problems, navigate complexity, and build a foundation for sustainable growth through collaborative work that focuses on efficiency, risk mitigation, and readiness for opportunities. As a top-100 U.S. firm and a certified B Corp, Sensiba differentiates itself with a culture that aims to help people, families, and communities thrive. Its goal is to support clients in achieving growth and stability while upholding social and environmental responsibilities.

Company size: 201-500
Company stage: Not listed
Total funding: Not listed
Headquarters: San Jose, CA
Founded: 1977

Recently Posted Jobs

Explore more opportunities at Sensiba

See more jobs