Senior Governance, Risk, and Compliance Analyst

Job Description

Job Description

Description

As a Senior Security GRC Analyst, you will serve as the primary security governance subject matter expert for our Austin, TX office, reporting directly to the Head of Security. In this role, you will lead regional governance initiatives while directly mentoring an associate analyst who will support day-to-day operations and recurring compliance tasks. You will also collaborate closely with our established GRC team based in Bethesda, MD, ensuring a unified and proactive security posture across the entire organization. 

• The "Clean Slate" Baseline Assessment: Conducting a top-to-bottom internal assessment of our current controls to identify gaps, review existing artifacts, and present a clear remediation roadmap to leadership.
• GRC Tooling & Automation Overhaul: Leading the evaluation, deployment, or optimization of a centralized compliance platform to automate evidence collection and establish untampered audit trails.
• Audit Readiness & Execution: Serving as the primary point of contact and project manager for our upcoming external audits.
• Third-Party Risk Reset: Designing and enforcing a reliable, transparent Vendor Risk Management (VRM) process that the business can trust.

• 6+ years of dedicated experience in GRC, IT Audit, or Information Security. Proven experience managing full audit cycles and conducting internal risk assessments independently.
• Calm, assured presence. Excellent written and verbal communication. 
• Low ego, and uncompromising integrity and ethics. 
• High degree of professional accountability (documents their work thoroughly). Excellent communication skills with the ability to explain complex risks to non-technical executives.
• We are looking for a meticulous, highly transparent GRC professional who thrives on bringing order to chaos. This person must be a self-starter capable of taking complete ownership of the GRC program, verifying current baselines, and implementing transparent, auditable processes that build unquestionable trust with internal leadership and external auditors.