Security GRC Analyst II

Manage a high-volume queue of security questionnaires, third-party due diligence assessments, and RFP security sections, ensuring accurate and SLA-compliant responses.

Use AI-assisted tools to draft responses, verify them against approved answer libraries, certifications (SOC 2, ISO 27001), and supporting evidence before release.

Maintain and update the answer library, convert recurring questions into self-serve trust site content, and support evidence packaging for customer security audits while tracking quality metrics.

2–4 years of experience in security GRC, compliance, IT audit, customer assurance, or a closely related function.

Working knowledge of SOC 2 and ISO 27001 with ability to interpret control requirements.

Demonstrated precision and accuracy under volume with SLA or queue-based work experience.

Hybrid work model requiring onsite presence at a Diligent office location at least 50% of the time if within commuting distance.

Experienced in SLA-driven environments that demand accuracy and efficiency in security compliance responses.

Comfortable using AI-assisted response tools with a verification mindset, escalating complex issues appropriately.

Skilled at managing multiple competing requests simultaneously and improving operational processes through content management and metric tracking.