Staff Security GFC Analyst

USD 276,960 - 363,510

Responsibilities

• Join Suno, a music technology company, as a Staff Security GRC Analyst. In this role, you will build and own Suno's security compliance program, mapping controls to SOC 2 and NIST CSF, leading SOC 2 preparation, automating evidence collection, running vendor security reviews, and partnering with the CISO to provide leadership and the board with a clear view of our security posture. You will have a direct line to leadership and the opportunity to make a significant impact on the company's security posture.
• Construire et posséder le cadre de contrôle de sécurité de Suno, en cartographiant les contrôles aux normes SOC 2 et NIST CSF.
• Diriger la préparation à la SOC 2 de bout en bout, des évaluations des lacunes et du suivi de la préparation à la conduite de la remédiation.
• Automatiser la collecte de preuves et la surveillance des contrôles à l'aide de scripts, d'intégrations et d'outils d'IA.
• Deep working knowledge of SOC 2 and NIST CSF, including control mapping, audit mechanics (design vs. operating effectiveness, sampling, evidence), and staying current as requirements evolve

Requirements

• Enough technical fluency to read a cloud configuration, access setup, or pipeline and judge whether it enforces what the control says. You don't need to write production code
• Hands-on, end-to-end ownership of a security compliance program as its primary owner, ideally including taking a company through its first SOC 2
• 7–9 years in GRC, security compliance, or IT audit
• Comfort building your own automation with scripts or AI tools
• Experience standing up continuous controls monitoring or automated evidence collection, including what it covered and what changed as a result
• Experience with cloud environments such as AWS or GCP, and with a modern GRC platform
• Experience applying LLMs to assurance work, such as control drafting, framework mapping, or evidence testing

Preferred

• Certifications such as CISA, CISSP, or CRISC