Senior GRC Analyst

📋 Description

• Own policy lifecycle: review and maintain security policies and standards.
• Coordinate cross-functional compliance with Legal, Regulatory, Internal Audit.
• Lead vendor risk: TPRM assessments and remediation tracking.
• Coordinate audits and certifications (SOC 2, PCI, CIS); evidence collection.
• Drive governance improvements for GRC processes.
• Maintain risk and issue registries; support remediation.

🎯 Requirements

• 5+ years in GRC, InfoSec, or IT audit.
• Experience managing audits or governance programs with limited supervision.
• Experience with SOC 2, ISO 27001, SOX, PCI-DSS, GDPR, CIS.
• Maintaining security policies, standards, and procedures.
• Hands-on TPRM assessments and vendor risk monitoring.
• GRC tooling experience such as ServiceNow, OneTrust, Archer.

🎁 Benefits

• Company-subsidized medical, dental, vision plans.
• 401(k) plan with company match.
• Annual bonus.
• Flexible PTO to encourage healthy work/life balance.
• Generous paid parental leave and disability benefits.
• Workplace flexibility and modern work schedules.