Security GRC Analyst
US$277,000 – US$363,500 / yr base salary
Posted 8 Oct 2026
Advertised as “Staff Security GRC Analyst”
BranchFactor Summary
The original posting with the fluff stripped out
- Expected experience
- 7–9 yrs
- Management level
- Individual contributor
- Employment
- On-Site
- Contract
- Full-time
| Base salary | US$277,000 – US$363,500 / yr |
|---|
CertificationsCISA, CISSP, CRISC
About Suno
We're building the world's first creative entertainment platform, where the entire world can feel the joy and fulfillment of making music. Music is for everyone: Our users include everyone from grandmothers creating songs for their loved ones, to Grammy winners using Suno Studio, our power tool, to make the most popular hits in the world.
Building the future of entertainment requires ambition. The pace is fast, the problems are hard, and the work demands ownership and intensity. For the right people, it’s incredibly rewarding: a chance to shape a new medium, work with a small team that cares deeply about quality, make music, drink too much coffee, and build something that millions of people use to express themselves in ways that were never before possible.
Suno is the fastest growing consumer entertainment company and the leader in AI music. We are backed by leading investors including Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital and, NVentures (venture arm of NVIDIA).
About the Role
We're looking for a Staff Security GRC Analyst to build Suno's security compliance program from the ground up. You'll report to our CISO, work alongside our AppSec and InfraSec teams, and own the control framework that ties everything together: which controls we have, how they map to SOC 2 and NIST CSF, and whether they actually work. You're as comfortable reading a cloud config as an audit standard, and you'd rather automate evidence collection with AI than chase screenshots. It's a greenfield build with real stakes and a direct line to leadership.
Listen to the song we made about it: https://suno.com/s/8U6fbhqLEghsnRsm
What You'll Do
-
Build and own Suno's security control framework, mapping controls to SOC 2, NIST CSF, and future frameworks, and writing control descriptions with the teams who run them.
-
Lead SOC 2 preparation end to end, from gap assessments and readiness tracking to driving remediation with control owners and working with our external auditor.
-
Automate evidence collection and control monitoring with scripts, integrations, and AI tools, deciding where human review stays in the loop.
-
Run vendor security reviews, keep our security policies current, and answer customer security questionnaires alongside Product and Legal.
-
Partner with the CISO to give leadership and the board a clear, evidence-backed view of our security posture, and lay the foundations of GRC as part of a growing Security team.
-
Help earn the trust of the partners and customers who bring Suno to more people, so creating music can be part of everyone's day.