Security Governance Risk & Compliance (GRC) Analyst

📋 Description

• Lead security governance, risk and compliance for FedRAMP, SOC 2, PCI, GDPR.
• Manage complex controls for cloud and SaaS (GCP, AWS, GitHub, Okta).
• Design automation for evidence collection across cloud, endpoints, SaaS.
• Conduct risk assessments; identify findings and remediation strategies.
• Support incident response with risk analysis and remediation.
• Incorporate CMMC into compliance assessments and monitoring (FedRAMP, SOC 2, PCI).

🎯 Requirements

• 5+ years in information security, IT audit, IT risk management, or GRC.
• Deep understanding of CMMC, NIST 800-53/171, FedRAMP, SOC 2, PCI.
• Cloud expertise (AWS, GCP, Azure) and familiarity with GRC tools (Hyperproof, Vanta, Drata) and SIEM (Datadog, Splunk).
• Proven ability to translate risk to business and technical stakeholders.
• Experience training/coaching teams to improve security and privacy.
• Autonomous, agile team contributor with ownership and collaboration.

🎁 Benefits

• Flexible PTO policy — 14 holidays.
• $1,500 annual Learning & Development stipend.
• Frequent company-sponsored team celebrations.
• Employee Assistance Program.
• Headspace for mental health support.
• A flat 3% retirement contribution.