Join the team — contract now, full-time opportunities ahead.
Multiple open team roles. Real delivery work, clear expectations, and room to grow with Sindria Nexus.
Sharp people. Meaningful work.
Work directly with startup teams on the controls that matter. These are bench opportunities; contract work depends on engagement needs, and future full-time roles depend on growth.
GRC Analyst
Contract, Contract-to-Hire
You're the engine room of every engagement. While Sindria Nexus leads strategy and client relationships, you make the evidence appear: collecting it, organizing it, testing it, and chasing it down when a client's engineer ghosts you for the third time.
What you’ll do
- Run evidence collection inside Vanta/Drata — map controls, assign owners, chase artifacts, close gaps.
- Document controls and procedures against SOC 2 Trust Services Criteria.
- Coordinate directly with client engineering teams.
- Flag control failures early — before the auditor does.
- Keep the engagement tracker ruthlessly current.
What you need
- 1–3 years in GRC, compliance, IT audit, or security operations.
- Working knowledge of SOC 2 and the Trust Services Criteria.
- Hands-on time in Vanta, Drata, or Secureframe.
- AWS basics.
- Organization bordering on compulsive.
Nice to have
Security+, CISA (or pursuing), startup experience.
Security Engineer (AWS)
Contract
Clients don't just need gaps found — they need gaps fixed. You're the remediation muscle: you go into their AWS environment and implement the controls their team can't or won't.
What you’ll do
- Implement technical controls — IAM hardening, CloudTrail/GuardDuty/Config/Security Hub setup, encryption, logging pipelines.
- Remediate findings from gap assessments on fixed-fee, fixed-timeline sprints.
- Build controls as code (Terraform/CloudFormation).
- Work alongside the GRC Analyst so every fix produces auditor-ready evidence.
What you need
- 3+ years securing AWS environments in production.
- Deep IAM, Organizations/SCPs, detective controls.
- IaC fluency (Terraform or CloudFormation).
- Comfortable in early-stage chaos.
Nice to have
AWS Security Specialty, SOC 2/ISO 27001 experience.
vCISO / Senior GRC Advisor
Fractional
The judgment layer. You're the gray hair on the call when an enterprise prospect needs to hear it from someone who's done this twenty times. As-needed, high-leverage, zero bureaucracy.
What you’ll do
- Join key client calls — scoping, audit prep, enterprise security reviews.
- Bless control architectures and risk decisions.
- Mentor our GRC Analysts.
- Advise Sindria Nexus on engagement strategy.
What you need
- 10+ years in security/GRC leadership; prior vCISO, Head of Security, or Big Four senior manager+ experience.
- Deep SOC 2 (Type I and II), working knowledge of ISO 27001.
- Executive presence.
Operations Assistant
Contract, Contract-to-Hire
Half operator, half delivery support. You keep Sindria Nexus focused on client growth by absorbing everything else: scheduling, tracking, coordination — plus real compliance support work as you learn the craft.
What you’ll do
- Own the pipeline tracker, follow-up schedules, and client coordination.
- Inbox triage, scheduling, meeting prep.
- Support engagements: evidence chasing, Vanta/Drata hygiene, document organization.
- Learn GRC on the job — this role grows into an Analyst seat.
What you need
- 2+ years in operations, admin, or project coordination.
- Frighteningly organized.
- Excellent written communication.
- Hunger to learn a technical craft.
- Atlanta-based, in person.
Summer 2027 Internships
We’re bringing on our first interns in Summer 2027. You’ll do real work — evidence collection, control testing support, Academy content, and market research — alongside the team, not fetching coffee. Ideal for students or recent grads who want to learn GRC from the inside of a growing firm.
We’re planning for an intern or interns — how many depends on the summer’s scope.
Apply for Summer 2027Internship application
Tell us who you are and what you want to learn. We read every application.
Proof of work. Not theater.
Email contact@sindrianexus.com with the role in the subject line, a short note on why this bench (not just this job), and whatever proves you can do the work — resume, writeup, war story. No cover-letter theater.
Exceptional people: don’t see your exact role? Send a general application and show us what you can do.
Email your application