Sr. GRC Analyst

📋 Description

• Own assigned GRC projects, compliance deliverables, and process improvements from planning through
• Support the day-to-day operation and continuous improvement of Aya’s enterprise GRC program.
• Design and improve scalable workflows that translate regulatory and framework requirements into
• Support compliance efforts for SOC 2 and ISO/IEC 27001:2022, including readiness activities, audit
• Establish and maintain clear control ownership, traceability, documentation, and evidence
• Identify opportunities to replace manual or spreadsheet-driven compliance activities with

🎯 Requirements

• 4+ years of experience in Governance, Risk, and Compliance, Information Security, IT Audit, or a
• Hands-on experience operating or configuring GRC tools such as ServiceNow GRC / IRM, Drata, Vanta
• Demonstrated experience owning GRC projects, compliance deliverables, or process-improvement
• Strong working knowledge of SOC 2 or ISO/IEC 27001:2022. Familiarity with HIPAA and other
• Experience with control design, evidence evaluation, risk assessments, audit support, remediation
• Experience improving manual compliance processes through automation, workflow design, or

🎁 Benefits

• Free premium medical, dental, life and vision insurance
• Generous 401(k) match
• Aya also offers other benefits to those that are eligible and where required by applicable law
• Aya provides paid sick leave in accordance with all applicable state, federal, and local laws.
• Celebrations! We hit our goals and reward ourselves.
• Company-sponsored virtual events, happy hours and team-building activities are always on the