Senior Security GRC Analyst

To support the Cyber Risk team, the full-time Senior Security GRC Analyst will manage risk assessments, exception management, and policy development while collaborating with business leaders and security teams in a hybrid work environment. Key responsibilities Evaluate and document known security risks for executive review, providing actionable treatment options Manage the lifecycle of risk exceptions from intake through decision and periodic reassessment Conduct security risk assessments against policies and industry frameworks, and draft security policies and standards Required qualifications 5+ years of experience in security governance, risk management, or compliance within technology environments Demonstrated experience conducting comprehensive security risk assessments and communicating findings to leadership Working knowledge of security frameworks and risk methodologies (e.g., NIST CSF, ISO 27001) Proven experience developing or managing security policies and standards Demonstrated experience using generative AI tools to enhance productivity in security tasks Virtual Vocations Inc