Senior GRC Analyst

Job Summary

Detail-oriented and automation-focused, the full-time Senior GRC Analyst will support and enhance the Governance, Risk, and Compliance program by leveraging GRC platforms and AI tools to automate compliance workflows and identify security gaps in a remote environment.

Key responsibilities

• Review, audit, and monitor security compliance programs against frameworks like PCI-DSS, NIST CSFv2, and SOC 1/2 using automation tools
• Identify opportunities to leverage AI tools for risk assessments and regulatory requirement summaries, optimizing processes
• Lead and automate evidence collection for external audits, reducing manual overhead for engineering and product teams

Required qualifications

• B.S. degree in Computer Science, Information Systems, Cyber Security, or a related technical field
• 5-7 years of GRC or Security Engineering experience, preferably in a SaaS, FinTech, or Cloud-native environment
• Solid understanding of Cloud Security compliance (AWS/Azure/GCP)
• Hands-on experience with scripting languages (Python, Bash, PowerShell) for automating GRC tasks
• Familiarity with security standards/frameworks such as PCI-DSS, NIST (800-53/CSF), and SOC 1/2 Type II