Senior Governance, Risk, and Compliance (GRC) Analyst (Remote)

This role will provide business-aligned guidance focused on governance, compliance, and operational risk management. You will partner with leaders, compliance stakeholders, and cross-functional teams to translate complex issues into practical recommendations. The position offers the opportunity to strengthen responsible execution, improve decision-making, and support sustainable growth within a technology-driven environment.

Responsibilities

• Lead GRC program across multiple compliance frameworks including SOC 2 and ISO 27001
• Manage and enhance the control framework, assessing compliance with new regulations
• Conduct annual security risk assessments, including risk scoring and tracking
• Maintain security policies and documentation for compliance with best practices
• Collaborate with teams to shift vulnerability management practices from reactive to proactive
• Develop and operationalize a Data Loss Prevention (DLP) program
• Drive company-wide AI governance, crafting policies and monitoring tool usage

Qualifications

• Bachelor's degree in Technology, Cybersecurity, or a related field preferred
• 6+ years of experience in GRC, IT audit, or information security compliance
• In-depth knowledge of SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and related regulations
• Experience with running formal risk assessments beyond a compliance checklist
• Desirable certifications include CISA, CRISC, CISSP, CIPP, or CIPM
• Familiarity with security tools like Drata, OneTrust, or Vanta
• Strong analytical and problem-solving capabilities, with attention to detail

Benefits

• Significant ownership from day one in role functions
• Opportunity to collaborate directly with CISO
• Engagement in cross-functional projects enhancing compliance effectiveness
• Exposure to a variety of compliance frameworks and industry practices

Pay

$110,000 – $130,000 annually

Remote - US based candidates only, no visa sponsorship available