Senior GRC Analyst

Job Summary

A company is looking for a Senior Governance, Risk & Compliance (GRC) Analyst.

Key Responsibilities

• Lead SOC 1, SOC 2, ISO 27001 audits and manage remediation of control gaps
• Own the lifecycle of security policies and facilitate cross-functional policy reviews
• Conduct enterprise risk assessments and manage vendor risk assessments

Required Qualifications

• 5-9 years of experience in GRC, security compliance, or risk within SaaS/cloud environments
• Direct ownership of SOC 2 and/or ISO 27001 audits
• Experience managing control frameworks and audit evidence lifecycle
• Strong understanding of risk assessment methodologies
• Proven ability to drive remediation across cross-functional teams