Senior GRC Analyst

Job Description

We are working with a rapidly growing, technology-driven organization seeking a Senior Governance, Risk & Compliance Analyst to strengthen its security and compliance program.

This is a hands-on role for someone who knows how to keep an organization audit-ready, evaluate third-party risk, and turn security requirements into practical processes that teams will actually follow.

You’ll be responsible for:

\n
• Conducting risk assessments of vendors, technology platforms, and AI tools
\n
• Identifying security and compliance gaps and tracking remediation through completion
\n
• Collecting and maintaining evidence for PCI DSS and privacy requirements
\n
• Documenting security controls and monitoring their effectiveness
\n
• Supporting internal and external audits
\n
• Updating security policies, standards, and control baselines
\n
• Maintaining the organizational risk register
\n
• Supporting quarterly risk reporting
\n
• Partnering with IT, Engineering, Legal, and other control owners
\n

The ideal candidate will bring:

\n
• 3+ years of experience in GRC, IT audit, security compliance, or a closely related area
\n
• Working knowledge of at least one major framework, such as PCI DSS, NIST, SOC 2, or ISO 27001
\n
• Experience using a GRC or governance platform such as Hyperproof, Archer, or OneTrust
\n
• Strong documentation, organization, and written communication skills
\n
• The ability to manage details, follow through, and keep multiple compliance initiatives moving
\n
• A practical, collaborative approach to security and risk management
\n

This is an excellent opportunity for someone who wants meaningful ownership and the ability to grow from strong execution into broader program leadership.