Senior GRC Analyst

We are working with a rapidly growing, technology-driven organization seeking a Senior Governance, Risk & Compliance Analyst to strengthen its security and compliance program.This is a hands-on role for someone who knows how to keep an organization audit-ready, evaluate third-party risk, and turn security requirements into practical processes that teams will actually follow.Please double check you have the right level of experience and qualifications by reading the full overview of this opportunity below.You'll be responsible for:Conducting risk assessments of vendors, technology platforms, and AI toolsIdentifying security and compliance gaps and tracking remediation through completionCollecting and maintaining evidence for PCI DSS and privacy requirementsDocumenting security controls and monitoring their effectivenessSupporting internal and external auditsUpdating security policies, standards, and control baselinesMaintaining the organizational risk registerSupporting quarterly risk reportingPartnering with IT, Engineering, Legal, and other control ownersThe ideal candidate will bring:3+ years of experience in GRC, IT audit, security compliance, or a closely related areaWorking knowledge of at least one major framework, such as PCI DSS, NIST, SOC 2, or ISO 27001Experience using a GRC or governance platform such as xhyhwjd Hyperproof, Archer, or OneTrustStrong documentation, organization, and written communication skillsThe ability to manage details, follow through, and keep multiple compliance initiatives movingA practical, collaborative approach to security and risk managementThis is an excellent opportunity for someone who wants meaningful ownership and the ability to grow from strong execution into broader program leadership. Averity