Staff GRC Analyst-Austin or San Antonio, Texas
Core
Assess and document information asset compliance and risk posture while serving as a trusted advisor to engineering, architecture, and business teams.
Role type
Staff GRC Analyst
Builds
System-wide risk management function and security program goals
Domain
Retail / Information Security / Governance, Risk & Compliance
Required skills
Risk management methodologies, Security frameworks (NIST, ISO 27001, PCI DSS, HIPAA, SOX), Cloud platforms (AWS, Azure, GCP), Identity and Access Management, Threat modeling, Vendor due diligence, Internal/External audit support, Vulnerability management
Preferred skills
Security Architecture, Security Consulting, Risk Management
Technologies
NIST 800-53, ITIL, CCPA, SOC 2, GRC/IRM platforms
Responsibilities
Lead development and implementation of system-wide risk management function; Define information security policies, standards, and procedures; Maintain risk register and perform internal risk assessments; Support vendor due diligence and third-party risk management; Liaise with external auditors on regulatory assessments; Ensure robust reporting processes related to security topics; Coach and mentor team members and stakeholders.
Seniority
Staff, hands-on IC with mentorship responsibilities
