Staff Security GRC Analyst (AI)

Location: On-site in NYC, Boston, Los Angeles, or San Francisco

Salary: $276,960–$363,510 annually, plus equity

Company

Suno is a consumer entertainment company building an AI-powered music creation platform used by people ranging from casual creators to professional musicians.

What you will do

• Build and own the security control framework, mapping controls to SOC 2, NIST CSF, and future frameworks.
• Lead SOC 2 preparation, including gap assessments, readiness tracking, remediation, and coordination with the external auditor.
• Automate evidence collection and control monitoring with scripts, integrations, and AI tools while defining appropriate human review.
• Run vendor security reviews, maintain security policies, and support customer security questionnaires with Product and Legal.
• Partner with the CISO to provide leadership and the board with an evidence-backed view of the security posture.

Requirements

• 7–9 years of experience in GRC, security compliance, or IT audit.
• End-to-end ownership of a security compliance program, ideally including a company's first SOC 2.
• Deep knowledge of SOC 2 and NIST CSF, including control mapping, audit mechanics, sampling, and evidence evaluation.
• Technical fluency to assess cloud configurations, access controls, and pipelines against control requirements.
• Ability to build automation with scripts or AI tools.

Nice to have

• Experience with continuous controls monitoring or automated evidence collection.
• Experience applying LLMs to assurance work, including control drafting, framework mapping, or evidence testing.
• Experience with AWS or GCP and a modern GRC platform.
• Certifications such as CISA, CISSP, or CRISC.

Culture & Benefits

• Work alongside the CISO, AppSec, and InfraSec teams in a growing Security organization.
• Work on a greenfield GRC program with direct exposure to leadership and the board.
• Help build an AI music platform used by millions of people.
• Equity offered as part of compensation.