Senior GRC Analyst

📋 Description

• Lead and conduct enterprise and product-level risk assessments.
• Support external audits and certifications (e.g., ISO 27001, SOC 2).
• Develop, review, and maintain security policies and procedures.
• Perform assurance activities to validate control design and effectiveness.
• Operate and improve third-party risk management programme.
• Track and report on compliance metrics and remediation progress.

🎯 Requirements

• Hands-on experience with ISO 27001 and SOC 2 audits
• Strong understanding of risk management principles
• Experience with security control testing in corporate and cloud environments
• Working knowledge of cloud platforms (AWS, Azure, or GCP)
• Familiarity with third-party risk management
• Strong communication and organizational skills

🎁 Benefits

• Generous PTO & Holiday Schedule
• Parental Leave
• Progressive Healthcare Options
• Retirement Programs
• Opportunity for Education Reimbursement
• Commuter Offset (Specific locations)