GRC Analyst

About the Company

Fluidstack is focused on delivering massive-scale compute infrastructure for AI. We acquire power, design and build data centers, and operate them, rethinking every layer of the stack to accelerate the frontier of AI.

Responsibilities

• Run the day-to-day compliance program across SOC 2 Type II, ISO 27001, NIST 800-53, and FedRAMP Moderate equivalency
• Manage continuous evidence collection, control monitoring, and audit readiness using GRC platforms like Vanta
• Own the policy and procedure set, including drafting, maintaining, and running review cycles
• Execute recurring control operations such as access reviews and control owner attestations
• Drive audit and assessment cycles with external auditors and manage the POA&M to closure
• Integrate new sites and teams into the compliance program to ensure consistent coverage as the company scales

Requirements

• Experience operating controls and pulling evidence against SOC 2, ISO 27001, NIST 800-53, or FedRAMP through real audits
• Proven experience owning compliance documentation, policies, procedures, and control narratives
• Experience defending control practices directly to auditors or assessors
• Ability to drive adherence and evidence collection from engineers and system owners independently
• Strong ability to translate control requirements into specific, verifiable artifacts

Preferred Qualifications

• FedRAMP Moderate equivalency or NIST 800-53 evidence work
• Experience with GRC platforms (Vanta) or continuous-compliance tooling
• Background in Cloud, GPU, or data center environments
• Experience mapping controls across multiple frameworks in parallel