Senior GRC Analyst
VulnU
- Senior GRC AnalystSemperis · semperis.comCategory: GRC & ComplianceLocation: RemoteLevel: SeniorAt Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.Location: Hybrid In-Office: Hoboken, NJ; Addison, TX; Phoenix, AZ; or Austin, TX About the RoleWe protect some of the world's largest, most complex hybrid identity environments, and that mission depends on earning and keeping our customers' trust. Our GRC team runs the policy, risk, compliance, and customer trust programs that let security-conscious enterprises, regulated industries, and government customers adopt Semperis products with confidence.As our Senior GRC Analyst, you'll own three core programs: SOC/ISO/HIPAA Audits, customer security questionnaires and upkeep of our security policies and standards. You'll also be the day-to-day point of contact for remediation follow through on audit findings, and you'll support our FedRAMP work on occasion during certification phases.We're a small team, so you'll back up teammates on vendor risk, risk exceptions, and our Trust Center when the queue gets heavy, and you'll be the person our GRC Analyst turns to for very complex questionnaires. You'll run your programs independently, bring recommendations to the Head of Risk and Compliance on scoping, policy, and higher-risk decisions, and get results through influence rather than authority.You'll succeed by being accurate, organized, and persuasive with engineers and business owners who don't report to you. You'll have AI and GRC tooling, including Vanta, to help you work efficiently. What You Will DoComplianceWork with the Head of Risk and Compliance for scoping and timing, then work with our PMO and Compliance consultants to prepare for, schedule, evidence, and execute on the fieldwork and reporting phases of the SOC2 Type II and ISO 27001 Audits. You’ll have support as needed from other team members.Cover HIPAA Audits (Security and Breach Notification Rules) as part of our SOC and ISO work.Support FedRAMP program and other frameworks as needed by researching control requirements, gathering evidence, reviewing deliverables, or producing documentation.Take on internal audit, assurance testing, and due diligence work, including M&A, when assigned.Customer TrustOwn customer, partner, and prospect security questionnaires and due diligence requests. Answer accurately and within SLA, working with Product and Engineering and/or FedRAMP SMEs to confirm answers.Take on the very complex questionnaires our GRC Analyst escalates, and help the analyst grow in GRC areas that are new to them.Build and maintain our reusable answer library using a mix of AI-assisted, automated, and manual processes.Remediation Follow ThroughDrive remediation dates with Engineering for non-FedRAMP audit findings: set recommended timelines, track milestones, and follow up with control owners.Escalate blockers on high-risk items to the Head of Risk and Compliance or the CISO, and hold control owners to deadlines through clear communication and data, without formal authority over their teams.Policy and GovernanceOwn the upkeep of our information security policies, standards, and procedures: draft updates and align them with frameworks such as NIST SP 800-53/CSF, ISO 27001:2022, HIPAA, and SOC 2.Work with policy owners, People Operations, and Legal to get changes reviewed, approved, published, and acknowledged.Stay current on regulatory, customer, and threat landscape changes, and recommend policy updates before they become audit findings.Team Coverage and Continuous ImprovementBack up teammates on vendor risk assessments, risk exception reviews, and the commercial Trust Center when an owner is out or the queue is heavy.Help define and report KPIs and KRIs, and support the cyber risk register.Help administer our GRC platform (Vanta) and find manual work to automate, such as evidence collection, control monitoring, and framework cross mapping.Support our security awareness training program.What You Will Bring (Required)5+ years of experience in GRC, information security risk, compliance, or IT audit, including experience at a SaaS company.A degree in Cybersecurity, or one of these certifications: CISSP, CRISC, CISM, or CISA.SOC 2 Type II and ISO 27001 audit and attestation experience.Clear written and verbal communication, with the ability to explain technical control details to engineers, business owners, and customers.A track record of getting results through influence with engineers and other stakeholders who don't report to you.Preferred QualificationsHands-on experience in at least four of these areas: security policy and standards; GRC operations; third party and vendor risk management; cyber and technology risk assessment and risk exceptions; risk registers and risk reporting; customer trust work (questionnaires, due diligence, Trust Center); running an audit or assessment; and security assurance (control testing and gap analysis).Experience with FedRAMP, NIST 800-53, or other government compliance frameworks.Hands-on configuration of a modern GRC platform such as Vanta, Drata, OneTrust, Archer, or ServiceNow.Experience automating control monitoring and evidence collection (\"compliance as code\").Experience answering customer security questionnaires at scale with AI-assisted tools.GRC experience at a cybersecurity, identity, or infrastructure software company serving regulated industries.Familiarity with AI governance frameworks such as ISO 42001 or NIST AI RMF.Experience with M&A due diligence or IPO readiness, audit test plan development, quantitative cyber risk analysis, or business continuity, incident response, or continuous monitoring plans.Success Measures (First Year)In your first 90 days, you take over customer questionnaires, remediation tracking, and policy upkeep, and cross-train on vendor reassessments, with accurate, on-time work.Coordinate preparation efforts for ISO 27001 Audit scheduled for February 2027.Questionnaires in your scope are answered within SLA, accurately and without overstating our security posture.Control owners consistently meet evidence and remediation deadlines without needing escalation.Our policy set is current, approved, and ready for audit.You deliver at least one measurable automation or process improvement that reduces manual work for the team.You're a trusted backup across GRC areas, so the team can rebalance work when it needs to.Additionally, this position requires the following:• U.S. citizenship. #LI-MR1Why Join Semperis?You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you.\\*\\*Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days.Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.
- J-18808-Ljbffr VulnU
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the Senior GRC Analyst in Addison, TX vacancy
- Semperis, a leading cybersecurity company, seeks a Senior GRC Analyst to own SOC/ISO/HIPAA audits, policy maintenance, and remediation tracking. You will manage customer security questionnaires and support FedRAMP efforts, collaborating with engineers and policy owners...SeniorRemote job
- ...Senior Credit Risk AnalystFunction: Credit RiskReports To: Head of CreditLevel: Mid-Level / SeniorLocation: Addison, TX (5 days/week... ...here, including this role.Position SummaryThe Senior Credit Risk Analyst supports the full credit risk lifecycle at Braviant, from...SeniorWork at officeVisa sponsorship
Braviant Holdings
Addison, TX2 days ago - ...and financial reporting. Collaborating with Actuarial, Pricing, Investments, IT, and governance teams, you’ll drive model development, data needs, and production readiness while communicating complex concepts to senior leadership and #J-18808-Ljbffr National Life GroupSenior
- National Life Group in the United States seeks a Senior Associate, Structuring to lead the design and management of internal feeder funds, CLOs and asset-backed structures from capital structure design through closing. This role collaborates with investment teams and external...Senior
- Overview The Technology Risk Assessor is an entry-level role focused on identifying, assessing, and documenting technology risks across the enterprise. This role supports the Technology Risk and Governance function by evaluating technology controls against industry-standard...Suggested
- ...Risk & Compliance Analyst 100% ONSITE AFF Compliance is seeking a highly motivated Risk & Compliance Analyst to support and enhance... ...with teams across Legal, Operations, Business Risk, and senior leadership to identify emerging risks, drive process improvements...Work at office
American First Finance
Addison, TX7 days ago - ...wallet holders and more than 40 million verified users, facilitating over $1 trillion in crypto transactions. We're looking for a Senior Risk Officer to help build and run risk management across Blockchain.com. This is a company-wide role: you'll help identify,...SeniorApprenticeshipWork at officeWorldwideFlexible hours
Blockchain
Dallas, TX17 hours ago - PwC is seeking a Regulatory Risk & Compliance Senior Associate specializing in Health Industries Payer Compliance. You will help clients navigate regulatory requirements, strengthen compliance processes, and interpret payer obligations. You will analyze issues, manage...Senior
$160k - $190k
...exposure to multiple industries (e.g., logistics, financial services, AgTech, construction). This role is onsite M/T/Th/F in Addison Seniority level Mid-Senior level Employment type Full-time Job function Information Technology and Strategy/Planning Business Consulting and...SeniorFull time- Ipro Networks Pte. Ltd. in Plano, TX is seeking a Compliance Senior Analyst to manage day-to-day compliance functions for a deposits portfolio. Responsibilities include reviewing compliance risks, preparing documentation for regulatory reviews, and communicating findings...Senior
- A major financial institution is seeking a Compliance Risk Management Senior Officer - Associate to strengthen risk oversight. The role requires over 5 years of experience in Compliance or Risk Management, ability to analyze various issues, and excellent communication...Senior
- Maximum Salary (US): 240000Minimum Salary (US): 220000Job SummarySenior Enterprise Architect focusing on Google. This is to play the role of Googles Principal Deal architect for various pursuits. This will involve Enterprise Analysis, as well as expert deal management.Key...Senior
HCL Technologies
Dallas, TX2 days ago $145k - $165k
Senior Controls Analyst ? Addison, TX (#AH1005) Location: Addison, TX Employment Type: Full-Time Ash & Harris Executive Search is seeking a Senior Controls Analyst to join a forward-thinking engineering team in Addison, TX . This role demands deep technical expertise in...SeniorFull time- ...experience and culture at weaver.com. Position Profile Weaver’s Governance, Risk, and Compliance (GRC) practice is seeking a motivated and detail-oriented experienced Associate or Senior Associate to join our growing Asset Management Consulting (AMC) team. This role offers a...SeniorWork at officeFlexible hoursShift work
- ...to grow as we strengthen our focus on technology-enabled risk management, governance, and assurance. We are seeking a Senior Technology Risk Analyst to play a critical role in helping the organization proactively manage technology risks while supporting Stryker’s strategic...SeniorFull timeFor contractorsRemote work
Stryker
Dallas, TX4 days ago $108.75k - $200k
Senior Credit Risk Modeling AssociateCountry: United States of AmericaIt Starts With You:Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the...SeniorHourly payFull timeContract workWork experience placementShift workGrupo Santander
Dallas, TX2 days ago- ...Bachelor’s degree (or foreign equivalent) in Statistic, Data Science, Business Analytics, or related and 3 years of experience as a data analyst, risk analyst, or a related role. Experience must include: Working with R programming to build decision tree and regression...Senior
Republic Finance
Plano, TX1 day ago - Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your...SeniorFull timeWork at officeRemote work
Fannie Mae
Plano, TX4 days ago - The Boeing Company in Dallas, TX is seeking an Experienced Procurement Analyst (Level 3) to join the BGS SM Commercial Compliance team. You will tackle intricate compliance challenges and mitigate risks across the supply base operations. Ideal candidates bring 5+ years...Senior
- Travelers Insurance is seeking a seasoned Risk Control professional to develop and oversee delivery of risk control services across accounts nationwide. The role involves marketing services to new and existing clients, managing budgets, and communicating risk to underwriting...Senior
- ...providing products and expertise that help nearly 16 million people save for a better today and tomorrow.Section 1: Position SummaryThe Senior Fraud Investigator is a senior individual contributor responsible for leading complex or high-impact investigations, identifying...SeniorFull timeSecond jobRemote work
Ascensus
Dallas, TX4 days ago $75k - $150k
...our employees feel respected, valued and have an opportunity to contribute to the company’s success. As a Risk & Control Specialist Senior within PNC's Enterprise Credit Portfolio Management organization, you will be based in Pittsburgh, PA / Houston, TX / Dallas, TX /...SeniorFull timeTemporary workPart timeWork experience placementWork at officeThe PNC Financial Services Group
Dallas, TX3 days ago$90.8k - $136.2k
Qualifications ~5+ years of related business analysis experience. ~ Genuine curiosity about how a technology solution provider and a partner reseller business actually operate, since you’ll need to build working expertise in both to write requirements that hold up ...SeniorFull timeFlexible hoursShift workWorld Wide Technology
Dallas, TX1 day ago$101.2k - $140.76k
...Healthcare Process Risk Senior Associate As a Healthcare Process Risk Senior Associate, you will get the opportunity to grow and contribute to our clients' business needs by helping them understand their business risks and assist in addressing risk in both proactive...SeniorWork at office- ...Senior Vice President & Bank Chief Compliance Officer (CCO) About the Company A regulated banking organization seeking to strengthen its enterprise compliance program. Industry Banking Type Privately Held About the Role The Company is in search...Senior
- Location: 8435 Stemmons Bldg. PRIMARY PURPOSE The Senior Compliance Investigations Consultant is responsible for effectively carrying out investigations of internal and external reports of compliance-related allegations. MINIMUM SPECIFICATIONS Education ~...SeniorWork at office
Parkland Health and Hospital System (PHHS)
Dallas, TX4 days ago $82k - $117k
...Job Description The Sr. Compliance Analyst (Regulatory Exams) is responsible for supporting the network of Cetera Financial Group's broker/dealer and registered investment advisers throughout the examination process. The Regulatory Exam Manager is responsible for coordinating...SeniorFlexible hoursShift work- PMG in Dallas, Texas is seeking a Resource Management Sr. Principal to lead and optimize the company's centralized resourcing function. You will play a critical role in workforce planning and ensure optimal deployment of talent across various teams. The ideal candidate ...Senior
$125k - $165k
...future of investing with confidence and innovation. Position Summary We are seeking an experienced, detail-oriented Senior Futures Risk Analyst to join our Futures Commission Merchant (“FCM”) risk management team in Jersey City/Dallas. This individual-contributor...SeniorContract workWork at officeLocal areamoomoo
Dallas, TX14 days ago- ...the U.S. operations within GBM. You will oversee examinations, remediation efforts, and regulatory governance while partnering with senior leaders across lines of defense. You will manage a team, ensure effective communications with regulators and internal stakeholders,...Senior
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior GRC Analyst. Be the first to apply!
Related searches
- senior manager accounts payable Addison, TX
- senior cloud service delivery manager Addison, TX
- senior software design engineer Addison, TX
- senior technical product manager Addison, TX
- srs Addison, TX
- senior project manager contract Addison, TX
- senior business analyst contract Addison, TX
- senior manager product development Addison, TX
- senior information technology project manager Addison, TX
- senior director continuous improvement Addison, TX