Senior Security GRC Analyst

Job Summary

Owning the day-to-day compliance program and customer security assurance function, the full-time Senior Security GRC Analyst will work remotely to mature the overall GRC program, automating processes and collaborating with cross-functional teams including People, Legal, IT, and Engineering.

Key responsibilities

• Own and mature the compliance framework, including continuous controls monitoring and audit coordination
• Automate GRC evidence collection and risk management workflows using compliance platforms and AI tools
• Manage the third-party risk management program, including vendor security assessments and continuous monitoring

Required qualifications

• 3-5 years of experience in security GRC, compliance, or customer assurance programs in high-growth environments
• Hands-on security knowledge in designing and developing technical controls (IAM, endpoint, cloud infrastructure)
• Experience with SOC 2 or equivalent and customer assurance processes
• Proficiency with compliance platforms and continuous controls monitoring tools (e.g., Vanta, Drata)
• Experience leveraging AI tools for GRC workflows