Senior GRC Analyst

Job Summary

To support the security program, the full-time Senior GRC Analyst will develop, maintain, and assess an integrated security and privacy management framework while managing compliance with industry standards and leading risk assessments, all in a remote capacity for candidates in the Central or Eastern time zones of the US or Canada.

Key Responsibilities

• Develop and implement security policies, standards, and procedures while promoting a culture of security and compliance across the organization
• Manage internal and external audits for certifications such as ISO 27001 and SOC 2 Type II, ensuring compliance and tracking remediation efforts
• Oversee the third-party security assurance program, conducting risk assessments and managing identified issues with suppliers

Required Qualifications

• 7+ years of experience in a GRC, IT Audit, Security Assurance, or Information Security role
• Bachelor's Degree in a relevant field or equivalent work experience
• Professional certifications such as CIPP/E, CIPP/US, CISA, CISM, or CISSP are highly desirable
• Direct experience in highly regulated industries, such as financial services or healthcare
• Deep knowledge of security and privacy frameworks (e.g., ISO 27001, SOC 2 Type II) and global privacy regulations (e.g., GDPR, HIPAA)