Senior GRC Analyst - Remote

Overview

The Senior GRC Analyst plays a critical role in supporting compliance efforts at GlossGenius by implementing and maintaining governance, risk, and compliance frameworks.

In Short

• Be the first member of the Governance, Risk, and Compliance team.
• Build and run information security compliance programs aligned with broader business objectives.
• Develop policies, standards, and guidelines for compliance with regulatory requirements.
• Manage company-wide information security policies and procedures.
• Perform security assessments of vendors and applications.
• Support the design and implementation of a risk-first governance function.
• Identify opportunities to improve efficiency and effectiveness in compliance processes.
• Assess information security risks and implement appropriate controls.
• Provide education on GRC topics across the organization.

Requirements

• 4+ years of experience in governance, risk management, and compliance roles.
• Strong understanding of compliance frameworks such as CCPA/CPRA, SOC 2, and HIPAA.
• Experience collaborating with engineering and product teams.
• Ability to influence cross-functional teams and communicate risks effectively.
• Solid organizational skills in fast-paced environments.
• Understanding of security concepts and a range of security risks.
• Bonus: Experience building automations for GRC initiatives.
• Bonus: Understanding of public cloud infrastructure like AWS and GCP.

Benefits

• Flexible PTO.
• Competitive health and dental insurance options.
• In-person opportunities for collaboration and community building.
• Fertility and adoption benefits.
• Generous paid parental leave policy.
• 401k benefit available from day 1.
• Yearly stipend for professional development.
• Pre-tax commuter benefits.
• Dependent Care FSA.
• Home office support.