[Hiring] Senior GRC Analyst I, SOC 2 @Sensiba

Role Description

The Senior GRC Auditor I is responsible for ensuring client satisfaction and efficient execution of engagement plans, while serving as a coach and advisor to team members. This role focuses on IT controls, security, and compliance across SOC 2 engagements, as well as broader risk and assessment services. Responsibilities include:

• Evaluating, testing, and documenting controls related to security, availability, processing integrity, and key business processes, including access management, change management, and system operations.
• Working across both platform-enabled (e.g., Drata, Vanta) and traditional audit environments, requiring adaptability in leveraging automated evidence as well as performing manual audit procedures.
• Building strong client relationships through a deep understanding of client systems, technology environments, and compliance requirements.
• Effectively communicating audit findings and recommendations.

Only candidates located in Ireland will be considered at this time.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Business, Accounting, Risk Management, or a related field.
• 3+ years of experience in governance, risk management, compliance, cybersecurity, audit, advisory, consulting, or related professional services roles.
• Experience mentoring or coaching junior professionals.
• Experience leading SOC 2 audits.
• Experience with controls reviews along with recommending, designing and advising on applicable IT controls.
• Relevant professional designation such as CISA, CISSP, CIPP, etc. is a plus.
• Experience with SOC 2 readiness platforms (e.g., Drata, Vanta, etc.) is preferred.
• Professional proficiency in written and spoken English, including the ability to communicate clearly and effectively with clients, colleagues, and leadership.

Requirements

• Lead and conduct detailed external audits of clients' business processes and IT controls, ensuring compliance with industry standards and regulations.
• Observe, review, document, and test key business process transactions, access controls, change management controls, operational and organizational controls, and automated controls for engagements.
• Review, document, evaluate and test application controls, particularly automated controls on a wide range of systems and software applications across a wide variety of client business processes.
• Evaluate clients' business, IT, and security risks, identifying areas of concern and recommending appropriate control measures and process improvements to mitigate risks.
• Assess security policies and procedures, reviewing risk management / risk assessment documentation, and controls of our clients’ business applications, networks, operating systems, and other components of their technology infrastructure.
• Support internal and external security assessments of new and existing services and infrastructure including operational, regulatory, and contractual requirements.
• Develop and nurture strong relationships with clients, gaining insight into their businesses, risks, and compliance.

Benefits

• Competitive base salary along with a comprehensive benefits package.
• Market-Leading Annual Leave – 30 days of paid annual leave (10 days above the Irish statutory minimum), plus an additional 5 days of paid leave for our firm's end-year shutdown in December.
• Pension Scheme – Plan for your future with our company-supported pension program.
• Flexible & Remote Work – Enjoy the flexibility of working from home, with WeWork subscriptions and access to local office hubs available for those who value face-to-face collaboration.
• Performance-Based Bonus – Recognition for your contributions through our annual discretionary bonus program.
• Professional Development – Investment in your expertise through tuition reimbursement, support for professional certifications (ACA, ACCA, CPA etc.), and dedicated mentorship.
• Tech of Your Choice – Your choice of a high-spec Mac or PC setup.
• Inclusive & Supportive Culture – DEI initiatives, employee resource groups, and comprehensive wellness programs.