Senior Technology Governance, Risk & Compliance (GRC) Analyst

📋 Description

• Lead a risk-based tech control program across the Technology org.
• Design, implement, and monitor controls per NIST CSF, PCI, SOC2.
• Oversee full control lifecycle: discovery, implementation, testing, remediation.
• Develop executive reports on control health and risk posture.
• Coordinate audits and serve as liaison for SOC2, PCI, and state exams.
• Maintain governance policies and procedures aligned with enterprise.

🎯 Requirements

• Bachelor’s degree in a technical field (Cybersecurity/IT) or equivalent.
• 5+ years in technology GRC with breadth across governance, risk, compliance.
• Hands-on with full control lifecycle: design, testing, remediation.
• Experience with tech risk assessments and risk registers; mitigation plans.
• In-depth knowledge of AWS, Okta, GitHub, and Atlassian products.
• Certifications such as CISA, CISM, CISSP, PCI ISA/QSA preferred.

🎁 Benefits

• Medical, vision, and dental insurance options.
• 401(k) with up to 5% match.
• Paid time off and holidays; sick leave included.
• Bonus and long-term incentive opportunities.
• Commuter benefits and other company perks.
• Stock program participation where applicable.