Senior Staff Analyst, Governance, Risk, and Compliance (GRC) - Remote

Overview

The Senior Staff Analyst, GRC role at Mozilla involves developing and implementing a comprehensive Governance, Risk, and Compliance framework that aligns security, privacy, regulatory, and risk management initiatives across the organization.

In Short

• Develop and maintain a GRC strategy and roadmap.
• Lead creation and enforcement of standards, policies, and controls.
• Develop a risk assessment and management framework.
• Ensure compliance with regulatory standards like ISO and GDPR.
• Collaborate with Legal, IT, Finance, and Security teams.
• Deliver measurable scorecards for data-driven decision making.
• Define requirements for data life cycle management.
• Lead internal and external audit activities.
• Drive long-term organizational impact through critical thinking.
• Influence diverse stakeholders to address cross-functional challenges.

Requirements

• 10+ years of experience in GRC frameworks.
• Strong understanding of regulatory frameworks.
• Experience leading cross-functional compliance implementations.
• Relevant industry certifications (CISA, CISSP, CISM, CRISC).
• Hands-on experience with technology and tools (SEIM, BI Tools).
• Ability to develop Root Cause Analysis and remediation plans.
• Strong critical thinking skills.
• Bias for action and ability to navigate constraints.
• Collaborative and influential in diverse environments.

Benefits

• Generous performance-based bonus plans.
• Rich medical, dental, and vision coverage.
• Generous retirement contributions with immediate vesting.
• Quarterly wellness days.
• Country-specific holidays plus a birthday day off.
• One-time home office stipend.
• Annual professional development budget.
• Quarterly well-being stipend.
• Considerable paid parental leave.
• Employee referral bonus program.