Job description

How you’ll make an impact: The Senior Compliance Associate will work within Strata’s Information Technology group and support the organization’s governance, risk, and compliance program. This role will focus on strengthening compliance operations, managing Strata’s compliance technology, supporting SOC 2 activities, and advancing Strata’s Third-Party Risk Management program. The position works collaboratively to ensure Strata complies with industry regulations, client requirements, and best practices. This is an opportunity to help shape how GRC operates at Strata. You’ll have meaningful ownership of our compliance technology, with the opportunity to automate manual processes, mature established SOC and Third-Party Risk programs, and build scalable GRC practices as our compliance needs continue to evolve. This role requires in-office presence at Strata’s Chicago office two days per week. Candidates should be comfortable working within this hybrid model. Key Responsibilities: Manage and optimize Strata’s compliance platform, including platform administration, configuration, integrations, and ongoing improvements, while identifying and implementing opportunities to automate evidence collection, control monitoring, workflows, and other repeatable compliance activities Own and coordinate SOC 2 Type II activities, including audit readiness, evidence management, control testing, and remediation Own, mature, and expand Third-Party Risk Management and security due diligence processes Support customer security questionnaire (DDQ) responses and internal compliance requests by providing GRC expertise, evidence, and documentation as needed Support broader GRC initiatives and emerging compliance requirements as the program evolves What we’re looking for: 4+ years of relevant experience in GRC, IT audit, compliance, or a related discipline Bachelor’s degree in a related field preferred, or equivalent relevant experience Hands-on experience administering or optimizing a GRC/compliance platform and using automation to improve evidence collection, control monitoring, workflows, or audit readiness Experience supporting or managing SOC 2 programs and controls Experience with Third-Party Risk Management and vendor security assessments Strong understanding of IT controls, compliance frameworks, and audit processes Excellent communication skills, including the ability to communicate technical concepts to non-technical audiences Strong technical writing and documentation skills Self-motivated, proactive, highly organized, and able to manage multiple priorities Ability to collaborate effectively with stakeholders at all levels of the organization Preferred qualifications: Experience administering and optimizing GRC/compliance platforms; CISA, CRISC, or other relevant GRC, information security, or compliance certifications. Estimated Salary Range: $95,000 - $115,000 Actual salary will be determined based on factors including, but not limited to, skill set and level of experience. This salary range is a good faith estimate of base pay. Strata also provides discretionary variable pay programs based on role. In addition, Strata provides a comprehensive benefits package including retirement benefits, health and welfare benefits, paid time off, parental leave, life and accident insurance, and other voluntary and well-being benefits. Find out more about Strata benefits here . How we work: Our preferred location for open roles is Chicago, IL. We value in‑person connection and regularly host on‑campus events to create meaningful opportunities for our team to build relationships and collaborate Thinking about applying? Research shows that women and underrepresented groups tend to apply to jobs only when they check every box on a job posting. If you’re currently reading this and hesitating to click “Apply” for that reason, we encourage you to go for it! A true passion and excitement for making an impact is just as important as work experience. Should you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please reach out to careers@stratadecision.com. Here @ Strata… Our culture is driven by our people solving problems together. We embrace learning, collaboration, and continuous career growth. Together, we lift our customers, our products, our company, and our community. We believe that each of our team member’s unique perspectives and experiences is what drives innovation and positive change. Our individual differences are what make us a more forward-thinking organization. We foster a culture of inclusion, equity and belonging, regardless of race, religion, disability, sex, sexual orientation, gender identity or national origin. Our Core Values: While we celebrate what makes each member of our team unique, our core values are what connect us. They set clear expectations for how we approach our work and how each of us can positively influence the experience of our team and our customers. We connect with positive intent. We are helpful. We own it. We get better every day. We are humble.

Requirements

Must-haves

This role requires in-office presence at Strata’s Chicago office two days per week. Candidates should be comfortable working within this hybrid model.
Own and coordinate SOC 2 Type II activities, including audit readiness, evidence management, control testing, and remediation
Own, mature, and expand Third-Party Risk Management and security due diligence processes
Support customer security questionnaire (DDQ) responses and internal compliance requests by providing GRC expertise, evidence, and documentation as needed
Support broader GRC initiatives and emerging compliance requirements as the program evolves
4+ years of relevant experience in GRC, IT audit, compliance, or a related discipline
Hands-on experience administering or optimizing a GRC/compliance platform and using automation to improve evidence collection, control monitoring, workflows, or audit readiness
Experience supporting or managing SOC 2 programs and controls
Experience with Third-Party Risk Management and vendor security assessments
Strong understanding of IT controls, compliance frameworks, and audit processes
Excellent communication skills, including the ability to communicate technical concepts to non-technical audiences
Strong technical writing and documentation skills
Self-motivated, proactive, highly organized, and able to manage multiple priorities
Ability to collaborate effectively with stakeholders at all levels of the organization
We connect with positive intent.
We are helpful.
We get better every day.
We are humble.

Nice-to-haves

Bachelor’s degree in a related field preferred, or equivalent relevant experience
Preferred qualifications: Experience administering and optimizing GRC/compliance platforms; CISA, CRISC, or other relevant GRC, information security, or compliance certifications.
How we work: Our preferred location for open roles is Chicago, IL. We value in‑person connection and regularly host on‑campus events to create meaningful opportunities for our team to build relationships and collaborate

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Paid Time Off

Parental Leave