# Staff Security GRC Analyst

Hiring organization: [Suno](https://career.thegoodapps.co/organizations/suno)

Canonical page: https://career.thegoodapps.co/jobs/07285dad-9827-4eee-a6ab-9087ae5e5cc9

Listed on Suno's own careers site. Applications go to them directly.

- Seniority: Senior
- Location: New York, NY
- Salary: 276960 – 363510 USD per year

## Summary

This role leads the build-out of Suno's security compliance and GRC program from the ground up, owning the control framework, SOC 2 preparation, and evidence automation while reporting directly to the CISO. It suits someone with deep compliance expertise who can bridge technical cloud environments and audit standards, and who wants to shape a security practice at a high-growth AI company.

_Our summary, not Suno's wording._

## Skills named

Amazon Web Services (AWS), Bash (Scripting), Python

## Required

- 7–9 years in GRC, security compliance, or IT audit
- Hands-on end-to-end ownership of a security compliance program as primary owner, ideally including first SOC 2
- Deep working knowledge of SOC 2 and NIST CSF including control mapping and audit mechanics
- Technical fluency to read cloud configurations and access setups to judge control enforcement
- Ability to build automation with scripts or AI tools

## Nice to have

- Experience standing up continuous controls monitoring or automated evidence collection
- Experience applying LLMs to compliance work such as control drafting or framework mapping
- Experience with AWS or GCP cloud environments
- Experience with modern GRC platforms
- Certifications such as CISA, CISSP, or CRISC

Apply on Suno's site: https://jobs.ashbyhq.com/suno/56970f07-68a2-4880-80e9-bdf7e1d42ba0/application