Senior GRC Analyst

Job Summary

Owning and advancing the governance, risk, and compliance program, the full-time Senior GRC Analyst will manage compliance frameworks, conduct risk assessments, and collaborate with cross-functional teams in a remote capacity.

Key Responsibilities:

• Lead the GRC program across various compliance frameworks, including audit preparation and evidence collection
• Manage and mature the control framework, conducting gap assessments and updating security policies
• Own the annual security risk assessment process and drive security awareness training initiatives

Required Qualifications:

• Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable
• 6+ years of proven experience in GRC, IT audit, or information security compliance
• In-depth knowledge of regulations and frameworks such as SOC 2, ISO 27001, and PCI DSS
• Professional certifications such as CISA, CRISC, or CISSP are highly desirable
• Familiarity with modern security tooling like Drata, OneTrust, or Vanta