{"id":2108555,"url":"https://alion.io/job/suno-staff-security-gfc-analyst","title":"Staff Security GRC Analyst","company":{"id":267,"name":"Suno","domain":"suno.com","url":"https://alion.io/company/suno","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":72,"open_postings":11,"ghost_share":0,"stale_share":0.909,"repost_share":0,"time_to_fill_p50_days":61,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["New York, United States","Boston, United States","Los Angeles, United States","San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":276960,"max":363510,"currency":"USD","period":"year","gross":null,"usd_annual":363510},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"AWS","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-08T19:26:54Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-30T18:38:10Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"About Suno\nWe're building the world's first creative entertainment platform, where the entire world can feel the joy and fulfillment of making music. Music is for everyone: Our users include everyone from grandmothers creating songs for their loved ones, to Grammy winners using Suno Studio, our power tool, to make the most popular hits in the world.\nBuilding the future of entertainment requires ambition. The pace is fast, the problems are hard, and the work demands ownership and intensity. For the right people, it’s incredibly rewarding: a chance to shape a new medium, work with a small team that cares deeply about quality, make music, drink too much coffee, and build something that millions of people use to express themselves in ways that were never before possible.\nSuno is the fastest growing consumer entertainment company and the leader in AI music. We are backed by leading investors including Bond Capital, Menlo Ventures, Lightspeed Venture Partners, IVP, Forerunner, Union Square Ventures, Alkeon, Quiet, Matrix Partners, Schroders Capital and, NVentures (venture arm of NVIDIA).\nAbout the Role\nWe're looking for a Staff Security GRC Analyst to build Suno's security compliance program from the ground up. You'll report to our CISO, work alongside our AppSec and InfraSec teams, and own the control framework that ties everything together: which controls we have, how they map to SOC 2 and NIST CSF, and whether they actually work. You're as comfortable reading a cloud config as an audit standard, and you'd rather automate evidence collection with AI than chase screenshots. It's a greenfield build with real stakes and a direct line to leadership.\nListen to the song we made about it: https://suno.com/s/8U6fbhqLEghsnRsm\nWhat You'll Do\nBuild and own Suno's security control framework, mapping controls to SOC 2, NIST CSF, and future frameworks, and writing control descriptions with the teams who run them.\n\nLead SOC 2 preparation end to end, from gap assessments and readiness tracking to driving remediation with control owners and working with our external auditor.\n\nAutomate evidence collection and control monitoring with scripts, integrations, and AI tools, deciding where human review stays in the loop.\n\nRun vendor security reviews, keep our security policies current, and answer customer security questionnaires alongside Product and Legal.\n\nPartner with the CISO to give leadership and the board a clear, evidence-backed view of our security posture, and lay the foundations of GRC as part of a growing Security team.\n\nHelp earn the trust of the partners and customers who bring Suno to more people, so creating music can be part of everyone's day.\n\nWhat You'll Need\nMust-Haves\n7-9 years in GRC, security compliance, or IT audit.\n\nHands-on, end-to-end ownership of a security compliance program as its primary owner, ideally including taking a company through its first SOC 2.\n\nDeep working knowledge of SOC 2 and NIST CSF, including control mapping, audit mechanics (design vs. operating effectiveness, sampling, evidence), and staying current as requirements evolve.\n\nEnough technical fluency to read a cloud configuration, access setup, or pipeline and judge whether it enforces what the control says. You don't need to write production code.\n\nComfort building your own automation with scripts or AI tools.\n\nNice-to-Haves\nExperience standing up continuous controls monitoring or automated evidence collection, including what it covered and what changed as a result.\n\nExperience applying LLMs to assurance work, such as control drafting, framework mapping, or evidence testing.\n\nExperience with cloud environments such as AWS or GCP, and with a modern GRC platform.\n\nCertifications such as CISA, CISSP, or CRISC.\n\nSuno is proud to be an Equal Opportunity Employer. We consider qualified applicants without regard to race, color, ancestry, religion, sex, national origin, sexual orientation, gender identity, age, marital or family status, disability, genetic information, veteran status, or any other legally protected basis under provincial, federal, state, and local laws, regulations, or ordinances. We will also consider qualified applicants with criminal histories in a manner consistent with the requirements of state and local laws, including the Massachusetts Fair Chance in Employment Act, NYC Fair Chance Act, LA City Fair Chance Ordinance, and San Francisco Fair Chance Ordinance.","description_format":"text","description_chars":4425,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Music Industry","Generative Audio & Music"],"lifecycle":[{"event":"open","at":"2026-10-21T07:19:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":207500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.623,"p_room":0.9,"age_days":21,"expected_fill_days":61,"reasons":["conf:0","stale_co","velocity","win:mid"],"computed_at":"2026-10-30T05:48:23Z"},"pay":{"stated_usd_annual":363510,"is_top_pay":true},"html_url":"https://alion.io/job/suno-staff-security-gfc-analyst","json_url":"https://alion.io/job/suno-staff-security-gfc-analyst.json","meta":{"generated_at":"2026-10-30T21:55:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12490,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":267},"rest":"https://alion.io/mcp/rest/get_company?id=267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsuno-staff-security-gfc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsuno-staff-security-gfc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsuno-staff-security-gfc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/suno-staff-security-gfc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsuno-staff-security-gfc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2108555}},{"tool":"search_jobs","arguments":{"company":"suno.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2108555},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}