Senior GRC Analyst

Job Summary

To support and enhance a global governance, risk, and compliance program, the full-time Senior GRC Analyst will manage risk assessments, policy governance, and audit support while working remotely in the United States.

Key responsibilities

• Own and support key components of the global GRC program, ensuring alignment with ISO 27001, SOC 2, and other regulatory obligations
• Lead enterprise and product-level risk assessments, collaborating with stakeholders to track remediation of security and compliance risks
• Support external audits and certifications, including evidence collection and auditor coordination

Required qualifications

• Hands-on experience with ISO 27001 and SOC 2 audits, including evidence gathering and control documentation
• Strong understanding of risk management principles and experience in conducting structured risk assessments
• Experience with security controls in corporate and cloud-based environments
• Working knowledge of cloud platforms (e.g., AWS, Azure, GCP) and compliance requirements in cloud environments
• Relevant professional certifications such as CISM or CISSP are desirable