Staff Security GFC Analyst
Suno is an AI-powered music-creation platform that enables users to generate, edit, and share original songs.
Funding history
About Suno
Suno Inc. operates a consumer AI music platform and browser-based generative audio workstation, Suno Studio, with music models and creation tools available across web and mobile.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will build and own the security control framework, map controls to SOC 2 and NIST CSF, and partner with control owners to ensure controls operate effectively. You will lead SOC 2 preparation, automate evidence collection and monitoring, conduct vendor reviews, maintain security policies, support customer questionnaires, and provide evidence-backed security reporting to leadership.
Requirements
- 7–9 years of experience in GRC, security compliance, or IT audit
- End-to-end ownership of a security compliance program
- Deep knowledge of SOC 2 and NIST CSF
- Knowledge of control mapping, audit mechanics, sampling, and evidence
- Ability to evaluate cloud configurations, access setups, and pipelines
- Ability to build automation using scripts or AI tools
- Experience with continuous controls monitoring or automated evidence collection
- Experience applying LLMs to assurance work
- Experience with AWS or GCP and a modern GRC platform
- CISA, CISSP, or CRISC certification
Responsibilities
- Build and own the security control framework
- Map controls to SOC 2, NIST CSF, and future frameworks
- Lead SOC 2 preparation, gap assessments, readiness tracking, and remediation
- Automate evidence collection and control monitoring
- Conduct vendor security reviews
- Maintain security policies
- Answer customer security questionnaires
- Report security posture to leadership and the board
Benefits
- Equity
