Senior Risk Analyst

📋 Description

• Design and mature a cross-domain risk program (security, AI, ops).
• Create risk taxonomy, scoring, appetite, and escalation thresholds.
• Own enterprise risk register; run owner-based risk workshops.
• Build AI-assisted risk analytics and threat monitoring workflows.
• Support TPRM with risk assessments and documentation.
• Focus on outcomes: measure exposure reduction, not activity.

🎯 Requirements

• 6+ years in GRC, information security, risk mgmt, or IT audit (SaaS/cloud).
• Knowledge of SOC 2, ISO 27001, NIST CSF 2.0, CIS Controls; ISO 42001/NIST AI RMF preferred.
• AI-native mindset: use AI for analysis, drafting, workflows with human in loop.
• Proficiency with GRC platforms (Drata, Vanta, AuditBoard, ServiceNow GRC).
• Familiarity with cloud platforms (AWS, Azure, GCP) and CSPM/SIEM identity tooling.
• Experience supporting external audits, including evidence collection and auditor interaction.

🎁 Benefits

• Equal-opportunity employer.
• Reasonable accommodations for protected disabilities.
• Careers page for verifying postings.