Staff Security Analyst - GRC

About the role

For our client, we are seeking a Staff Security Analyst - GRC to join the team of a leader in the Enterprise Technology space. This role will own key governance, risk, and compliance initiatives that support both commercial and federal security requirements. The ideal candidate will help strengthen control environments, automate compliance workflows, and partner closely with product, engineering, auditors, and external stakeholders to maintain trust and reduce risk. This is a hands-on role for a security professional who can balance technical depth, program management, and clear communication in a fast-paced environment. Location: Remote - US based candidates only, no visa sponsorship available.

Responsibilities

• Design and implement commercial compliance controls for multiple certifications and regulatory requirements
• Develop automation solutions for security compliance tasks and reporting
• Support federal compliance initiatives, including FedRAMP and CMMC frameworks
• Manage customer trust by reviewing contracts and security questionnaires
• Provide actionable security guidance for product and engineering projects
• Engage with external suppliers, auditors, and assessors for compliance management
• Identify and mitigate risks in compliance projects and vendor relationships

Qualifications

• 8-10 years of experience in security, compliance, and GRC program management
• Expertise in commercial regulations and certifications such as ISO 27001, SOC 1, SOC 2, PCI-DSS, and HIPAA
• Experience with GRC tools and automation in cloud environments, including AWS, GCP, and Azure
• Familiarity with federal compliance frameworks, including NIST 800-53, FedRAMP, and CMMC
• Strong project management skills and ability to handle multiple priorities effectively
• Excellent written and verbal communication skills for diverse stakeholder engagement
• Adaptable in fast-paced, ambiguous situations

Benefits

• Comprehensive healthcare benefits, including FSA options
• Flexible work schedules and remote or hybrid work availability
• Employee Assistance Program for personal support
• Flexible Time Off and parental leave policies
• Monthly, quarterly, and annual team-building events
• Monthly internet reimbursement to support remote work

Pay

Compensation: $160,000 – $190,000 annually