Senior Governance, Risk, and Compliance (GRC) Analyst - Remote

Overview

As a Senior Governance, Risk, and Compliance (GRC) Analyst, you will partner with Serve business and technology stakeholders to facilitate and align on security best practices.

In Short

• Serve as a subject matter expert on security best practices.
• Maintain security documentation including policies and procedures.
• Manage the security awareness program and phishing simulations.
• Conduct risk assessments of third-party vendor services.
• Support periodic IT audits for compliance.
• Track and manage audit findings and remediation activities.
• Manage the compliance framework and risk control matrix.
• Prepare weekly reports on compliance status for leadership.

Requirements

• Knowledge in ISO 27001/2 and SOC 2 trust principles.
• Knowledge in Information Security best practices.
• Certifications such as CISA, CISSP are desired but not required.
• Experience with compliance audits in a lead or supporting role.
• Experience in preparing compliance audit workpapers.
• Experience in managing an Enterprise Risk Management Lifecycle.
• Familiarity with Standard Information Gathering for Vendor Risk Assessments.
• Experience using Atlassian Jira for project management.
• Experience with GRC or IRM tools such as Archer or Vanta.
• Experience with BI/analytics tools like Looker or PowerBI.
• Ability to prioritize in a fast-paced environment.

Benefits

• Opportunity to work with a diverse and agile team.
• Engage in innovative projects leveraging robotics and machine learning.
• Contribute to solving real-world problems.