Latest AI JobsBrowse Jobs
Suno logo

Staff Security GFC Analyst

SunoNYCEngineering
Apply on company site
Salary
$276,960 – $363,510
Job type
Full-time
Experience
Senior · 7+ yrs
Posted
8 Oct 2026
Status
Open · checked 7d ago

About this role

This role suits an experienced compliance professional with a strong technical background who wants to establish a comprehensive security compliance program from scratch in New York City. The Staff Security GRC Analyst position at Suno involves designing and managing security frameworks for a consumer entertainment platform.

Role Overview

Suno seeks a Staff Security GRC Analyst based in NYC to develop the security compliance program from the ground up. Reporting to the CISO and collaborating closely with infrastructure and application security groups, this full-time position handles control frameworks, compliance mappings, and automated evidence collection.

Key Responsibilities

Design and manage the security control framework, linking controls to NIST CSF, SOC 2, and upcoming standards while drafting descriptions alongside operating teams.
Manage the entire SOC 2 preparation lifecycle, covering readiness tracking, gap assessments, remediation efforts, and external auditor coordination.
Develop automated evidence gathering and control verification utilizing scripts, integrations, and artificial intelligence capabilities.
Handle third-party vendor security assessments, maintain security policies, and complete customer questionnaires alongside legal and product departments.
Collaborate with the CISO to present clear security posture reports to leadership and the board of directors.

Requirements

Seven to nine years of professional background in IT audit, security compliance, or GRC.
Direct responsibility for leading a security compliance program as the primary owner, which ideally includes guiding an organization through its initial SOC 2 certification.
Comprehensive understanding of NIST CSF and SOC 2 frameworks, covering audit procedures, evidence standards, and control mappings.
Technical familiarity to evaluate cloud configurations, access controls, and pipelines to ensure alignment with stated controls.
Ability to create custom automation processes using scripts or AI technology.

Nice to Have

Practical background in establishing automated evidence gathering or continuous controls monitoring.
History of utilizing large language models for compliance tasks like framework mapping or control generation.
Familiarity with modern GRC platforms and cloud platforms like GCP or AWS.
Professional credentials including CISSP, CISA, or CRISC.

Skills and Tools

SOC 2
NIST CSF
AI tools
Scripts
AWS
GCP

Salary and Benefits

Salary range from $276,960 to $363,510
Equity offerings included

About the Company

Suno operates a creative entertainment platform focused on music creation, backed by investors such as Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital, and NVentures.

How to Apply

Interested candidates should apply on the official company careers page.

Skills and tech stack

AWSGCPLLMs

Questions candidates ask

What is the salary range for the Staff Security GRC Analyst position?

The salary ranges from $276,960 to $363,510 and includes equity offers.

Where is the job located?

The role is located in New York City.

How many years of experience are required for this role?

Candidates must have 7 to 9 years of experience in GRC, security compliance, or IT audit.

Who does this position report to?

The Staff Security GRC Analyst reports directly to the CISO.

What frameworks will this role work with?

The role works primarily with SOC 2 and NIST CSF frameworks.

Ready to apply?

The application is on the official Suno careers page.

Apply on company site