Staff Security GRC Analyst

Suno is an innovative entertainment company focused on AI-driven music creation, aiming to make music accessible and enjoyable for everyone. The company is rapidly growing and backed by prominent investors, emphasizing quality and user engagement. The team works in a fast-paced environment where creativity and technical expertise are highly valued, and the goal is to shape a new medium of entertainment that reaches millions of users worldwide.

The role of a Staff Security GRC Analyst involves establishing and managing Suno's security compliance framework from scratch. This person will coordinate with various teams to develop controls, prepare for SOC 2 audits, and automate evidence collection using scripts and AI tools. The position offers a strategic opportunity to influence security practices at a growing company and report directly to the CISO.

Candidates should have extensive experience in security compliance, particularly with SOC 2 and NIST CSF, and possess the technical ability to interpret cloud configurations and access setups. The role requires ownership of the compliance program, automation skills, and the ability to communicate security posture effectively to leadership. The work is onsite at multiple U.S. locations, and prior experience with cloud environments and security certifications are advantageous.