Back
Mid-level metro role but niche GRC/SOC2 skillset and questionnaire specificity reduce broad applicant density.
High domain specificity; SOC2/ISO and questionnaire experience transfers within security/compliance roles but not broadly.
Explicit 2–4 years, mandatory GRC/compliance experience and SOC2/ISO knowledge.
Login to See Your Match Score
Create a free account or log in to unlock your CV match score across:
Manage a live and high-volume queue of security questionnaires, due diligence assessments, RFP security sections, and customer assurance requests with SLA-driven turnaround and accuracy.
Use AI-assisted tools to draft responses, then verify against approved answer libraries, certifications (SOC 2, ISO 27001), and supporting evidence before release.
Maintain and expand the answer library and customer trust content to reduce recurring queries and support self-service, while packaging evidence for audits and tracking quality metrics.
2-4 years experience in security GRC, compliance, IT audit, customer assurance or related function.
Working knowledge of SOC 2 and ISO 27001 controls with the ability to interpret control requirements.
Proven accuracy and precision under volume in SLA-driven or queue-based environments.
Comfort with AI-assisted drafting tools plus strong written English and organizational skills.
Experienced operating in high-volume, SLA-measured governance and compliance workflows requiring accuracy and turnaround focus.
Familiar with security questionnaire formats and trust portal platforms (e.g., SafeBase, Whistic) is a plus but not mandatory.
Able to handle escalation judiciously, ensuring complex issues are routed appropriately without guessing.