Senior GRC Analyst

Join Crusoe, a leading company in the field of sustainable computing. As a Senior GRC Analyst, you will be responsible for driving the day-to-day execution of our Governance, Risk, and Compliance program. You will work closely with stakeholders across IT, Security, Finance, and Engineering, and will have the opportunity to make a significant impact on our continuous compliance posture.

• Assumer la responsabilité de l'exécution quotidienne du programme de gouvernance, de gestion des risques et de conformité (GRC) de l'entreprise, y compris la gestion des opérations de conformité.
• Appliquer une expertise en matière d'exigences d'audit SOX pour soutenir la conception, l'exploitation et les tests des contrôles généraux informatiques (ITGC).
• Agir en tant que point de contact principal pour les auditeurs internes et externes, gérer les demandes et faciliter les visites.

• The ideal candidate is proactive, detail-oriented, and brings a mindset for efficiency, leveraging AI tools and automation to reduce manual effort and scale their impact across the program
• Highly organized, self-directed, and able to manage multiple priorities and stakeholders independently
• Practical knowledge of compliance frameworks such as SOC 2, ISO 27001, HIPAA, and NIST CSF
• Detail-oriented with strong follow-through on recurring operational tasks
• Familiarity with responding to customer security questionnaires and managing trust center content
• Hands-on experience with GRC platforms (Vanta preferred; Drata, AuditBoard, or similar also valued)
• Comfort using AI tools (e.g., Gemini, Claude, Copilot) to accelerate day-to-day work and improve operational efficiency
• Experience conducting user access reviews, vendor risk assessments, and internal audits
• 5–7 years of experience in GRC, information security, IT audit, or a related compliance role, with demonstrated ownership of end-to-end audit cycles
• Solid understanding of SOX 404 audit requirements and IT general controls, with hands-on experience identifying control gaps and working with stakeholders to remediate them
• Strong written and verbal communication skills with the ability to translate compliance requirements for both technical and non-technical audiences; skilled at influencing control owners without direct authority
• Certifications such as CISA, CRISC, CISSP, Security+, or ISO 27001 Lead Auditor
• Background from public accounting and/or high-growth technology companies navigating SOX compliance
• Familiarity with financial systems (ERP, billing, or revenue recognition platforms)
• Experience mentoring junior analysts or leading cross-functional compliance initiatives
• Experience with policy management and security awareness training platforms
• Experience with cloud environments (GCP preferred; AWS/Azure exposure helpful)
• Familiarity with AI risk assessment frameworks and emerging AI governance practices