Senior Cybersecurity GRC Analyst

Job Summary

Leading internal and external audit engagements, the full-time Senior Cybersecurity GRC Analyst will drive risk management activities, enhance governance programs, and collaborate with stakeholders to strengthen compliance and risk posture in a remote environment.

Key responsibilities

• Own and lead internal and external audit engagements, ensuring compliance and continuous improvement across multiple business units
• Drive risk management activities, including identification, assessment, and reporting, while recommending mitigation strategies to leadership
• Develop and maintain governance, risk management, disaster recovery, and third-party risk management programs

Required qualifications

• Strong knowledge of security frameworks and regulations such as NIST CSF, ISO 27001, and SOC
• Demonstrated ability to manage audit engagements from planning to remediation follow-up
• Experience leading cross-functional initiatives to improve compliance posture
• Bachelor's degree in cybersecurity, computer science, or information technology, or 1+ years of IT experience in Governance, Risk, and Compliance
• Professional certification preferred (e.g., CISA, CISSP, CISM, or equivalent)