GRC Analyst II

About the role

The Governance, Risk, and Compliance (GRC) Analyst will join Metropolis's expanding Security team. Reporting to the Senior Manager, GRC, this role involves authoring, updating, and enforcing corporate security policies, deploying and managing required information security training campaigns, establishing an internal AI governance framework, conducting risk assessments, and reviewing vendor security profiles.

Responsibilities

• Author, update, and enforce corporate security policies to ensure cross-departmental compliance
• Deploy and manage required information security training campaigns as the platform owner
• Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs
• Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams
• Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails
• Report training metrics, policy exceptions, and risk postures directly to senior management
• Review vendor security profiles and software pipelines to mitigate security risk

Requirements

• 3+ years of experience in information security GRC, cybersecurity training, or technology compliance
• Proven track record of managing required security awareness programs and driving cross-functional accountability
• Experience with modern training orchestration platforms and understanding of AI and machine learning data security
• Working knowledge of standard industry frameworks, specifically SOC 2 and PCI-DSS

Qualifications

• Communication skills with the ability to explain complex regulatory needs to non-technical employees
• Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline

Skills

• GRC certifications such as CISA or CRISC (a plus)

Benefits

Metropolis offers a competitive compensation package, including a base salary range of $100,000.00 USD to $135,000.00 USD annually, depending on qualifications and experience. Additional benefits include access to healthcare, a 401(k) plan, disability coverage, life insurance, stock options, bonuses, and more.

Pay

The anticipated base salary for this position is $100,000.00 USD to $135,000.00 USD annually.

Schedule

Metropolis operates an office-first model, requiring employees to be on-site at least four days a week to foster organic interactions and enhance the Member experience.

Benefits

Metropolis is committed to an inclusive culture and provides various benefits to its employees, including healthcare, disability coverage, life insurance, a 401(k) plan, stock options, bonuses, and more.

Equal Opportunity Employer

We are proud to be an equal opportunity employer and make all hiring decisions based on merit, qualifications, and business needs, without regard to race, color, religion, sex (including gender identity, sexual orientation, or pregnancy), national origin, disability, veteran status, or any other protected characteristic under federal, state, or local law.