Primary focus areas for this position:

Policy and standard updates (editing, versioning, alignment to current frameworks)

Control rewrites and control mapping (SOC 2, HITRUST, NIST CSF)

Evidence and documentation hygiene to support audits and ongoing assurance

Control documentation support (risk statements, control intent language, mappings)

Assisting with compliance automation efforts (OneTrust), including:

Control library clean-up

Framework mapping

Workflow and documentation support (not tool ownership)

What Im looking for in the profile:

Strong background in GRC governance, audits, and control frameworks

Experience with SOC 2 and HITRUST (hands-on documentation work)

Comfortable doing detailed execution work (policy edits, control language, mappings)

Familiarity with compliance automation platforms is a strong plus

Able to take direction and execute independently without needing heavy oversight

SOC2 Support