Leading policy development and audit execution, the full-time Senior IT GRC Analyst will manage SOC 2 readiness efforts, maintain IT policies, and coordinate audit engagements in a remote environment. Key responsibilities Lead SOC 2 readiness assessments, including scope definition and control design Serve as the primary contact during audit engagements and regulatory exams Develop and maintain IT policies and procedures to align with regulatory requirements Required qualifications Bachelor's degree in Information Technology, Cybersecurity, or a related field (equivalent experience considered) 5+ years of experience in IT audit, compliance, or GRC within an enterprise IT environment Demonstrated experience managing SOC 2 audit cycles from scoping through remediation Direct experience in financial services or related regulated industries, with knowledge of applicable regulations Strong working knowledge of IT compliance frameworks such as NIST CSF, ISO 27001, or SOX