Senior GRC Analyst (New York City Metropolitan Area)

We are working with a rapidly growing, technology-driven organization seeking a Senior Governance, Risk & Compliance Analyst to strengthen its security and compliance program.

This is a hands-on role for someone who knows how to keep an organization audit-ready, evaluate third-party risk, and turn security requirements into practical processes that teams will actually follow.

You’ll be responsible for:

• Conducting risk assessments of vendors, technology platforms, and AI tools
• Identifying security and compliance gaps and tracking remediation through completion
• Collecting and maintaining evidence for PCI DSS and privacy requirements
• Documenting security controls and monitoring their effectiveness
• Supporting internal and external audits
• Updating security policies, standards, and control baselines
• Maintaining the organizational risk register
• Supporting quarterly risk reporting
• Partnering with IT, Engineering, Legal, and other control owners

The ideal candidate will bring:

• 3+ years of experience in GRC, IT audit, security compliance, or a closely related area
• Working knowledge of at least one major framework, such as PCI DSS, NIST, SOC 2, or ISO 27001
• Experience using a GRC or governance platform such as Hyperproof, Archer, or OneTrust
• Strong documentation, organization, and written communication skills
• The ability to manage details, follow through, and keep multiple compliance initiatives moving
• A practical, collaborative approach to security and risk management

This is an excellent opportunity for someone who wants meaningful ownership and the ability to grow from strong execution into broader program leadership.