Senior Security GRC Analyst

Job Summary

To support the Cyber Risk team, the full-time Senior Security GRC Analyst will manage risk assessments, exception management, and policy development while collaborating with business leaders and security teams in a hybrid work environment.

Key responsibilities

• Evaluate and document known security risks for executive review, providing actionable treatment options
• Manage the lifecycle of risk exceptions from intake through decision and periodic reassessment
• Conduct security risk assessments against policies and industry frameworks, and draft security policies and standards

Required qualifications

• 5+ years of experience in security governance, risk management, or compliance within technology environments
• Demonstrated experience conducting comprehensive security risk assessments and communicating findings to leadership
• Working knowledge of security frameworks and risk methodologies (e.g., NIST CSF, ISO 27001)
• Proven experience developing or managing security policies and standards
• Demonstrated experience using generative AI tools to enhance productivity in security tasks