Security Compliance Analyst

About this role

ABOUT AUROR

At Auror, we’re empowering the retail industry to tackle theft and Organised Retail Crime, a $150 Billion problem globally. It’s high volume crime that’s increasingly organised in nature and is putting people, retailers, and communities at risk every day.

Founded in New Zealand 12 years ago, we’re working with some of the best and largest retailers in the world across the US, Canada, Australia, New Zealand, and the UK. Auror is connecting people and intelligence to reduce crime. We’re using technology for good.

Our mission is clear: reduce violent retail crime by 50% in 5 years. It's an ambitious goal - and one we believe is achievable. In partnership with our leading retail partners, we need people with the passion, determination, and innovation required to overcome one of the world's largest problems. If you’re looking to make a difference with and for the people dedicated to stopping crime, for good, then we want you on our team.

We're also embracing the potential of AI to supercharge our impact - whether that's enhancing the way we detect trends, support our customers, or improve internal workflows. As a company, we're committed to responsibly incorporating AI into how we work and what we build, and we encourage all Aurors to be curious about how AI can elevate their work, regardless of role or function.

THE ROLE

In the role of GRC Analyst within the Security Compliance & Customer Trust pillar, you will own the day-to-day operations that keep Auror's compliance programme running — and our customers confident. Your primary focus is questionnaire operations: you manage the intake queue, maintain the answer library, and draft first-pass responses so our compliance work moves quickly and accurately. You will also support SOC 2 readiness, Vanta administration, and Trust Centre documentation under the guidance of the GRC Lead.

Reporting directly to the Senior Director of Information Security, you bring strong written communication and a high ownership mindset to a role that sits at the intersection of security, sales, and customer trust. You keep the pipeline moving, flag risks before they become problems, and help build the infrastructure that lets Auror answer customer security questions at scale.

This role partners closely with Sales, Customer Success, and Engineering to ensure questionnaire responses are accurate, timely, and reflect Auror's current security controls. You are process-oriented, comfortable managing a queue with competing priorities, and confident communicating under deal-cycle pressure.

RESPONSIBILITIES

- Questionnaire Intake and Triage: Own the questionnaire intake queue — log incoming requests, track deadlines, and maintain a live status tracker so nothing falls through. Flag at-risk SLAs to the GRC Lead and coordinate with Sales and Customer Success on customer expectations.

- Answer Library Management: Maintain a library of pre-approved, evergreen responses covering security controls, data handling, sub-processors, and incident response. Target first-pass coverage of ~80%+ without GRC Lead review.

- First-Pass Completion: Draft responses to standard security questionnaires — SIG Lite, CAIQ, and custom customer formats — by drawing on the answer library and current control documentation. Escalate novel or sensitive items to the GRC Lead with clear context.

- SLA and Pipeline Visibility: Own completion metrics — report progress to the GRC Lead, and proactively surface any risks to delivery timelines.

- SOC 2 and Vanta Support: Help coordinate the audit readiness calendar (evidence windows, policy reviews, vendor reviews) under GRC Lead direction. Manage alerts and vendor records in Vanta as part of Auror's continuous compliance posture for SOC 2 and future audit programmes.

- Linear Ticket Management: Create and track Linear tickets for findings that require remediation or input from other teams. Follow up to make sure items do not stall.

- Audit Support: Support annual audit activities by collecting and organising evidence, tracking audit-related tickets, and archiving materials for reference.

- Trust Centre Documentation: Prepare documents for review and inclusion in Auror's Trust Centre, ensuring accuracy and consistency with current control posture.

THIS ROLE REPORTS TO SCOTLAND SYMONS, SENIOR DIRECTOR OF INFORMATION SECURITY

Scotland has been working in the Technology & Security industry for the last twenty years and has worked for Microsoft, Apple, Amazon, and a few more. Coming to Auror from the US, she runs the security team at Auror focusing on all of our efforts to secure the platform, code and efforts to protect Auror and its customers. In her own words below:

“Security for me is about critical thinking and flexibility, Security is also not linear and requires lots of exploration and through good iteration driving towards the goal of good architecture. I try to weigh the needs of immediate action with long term Security & Engineering efforts while weighing the need of keeping the business going. The role of Information Security can sometimes be stressful especially in times where there is an incident and so I try to approach things with deep honesty as well as levity. I always keep failure in mind but don’t look at it as a dead end but rather an opportunity to learn how to get up and keep going.”

REQUIREMENTS

- 2–3 years of experience in GRC, IT audit, or security operations

- Familiarity with SOC 2 trust service criteria

- Experience with questionnaire tools (Conveyor, Responsive, RFP360, or similar) — or a strong desire to build that muscle

- Comfort with Vanta or similar compliance automation (nice to have)

- Strong written communication — you will be the first voice customers hear on security questions

- Process-oriented with high ownership on deadlines; comfortable managing a queue with competing priorities

- Ease working cross-functionally with Sales and…