Senior Governance, Risk & Compliance Analyst
Core
Senior GRC Analyst supporting second-line assurance for Relativity's control landscape, performing integrated IT control testing, and advising first-line teams on control operationalization.
Role type
Senior IC GRC Analyst (IT Risk & Compliance)
Builds
Automated evidence collection and control testing for known systems
Domain
Information Security, IT Governance, Risk, and Compliance
Required skills
IT General Controls (ITGC) testing, Risk and Control Matrix (RCM) maintenance, Automated evidence collection, Framework requirement translation (NIST, ISO, SOC 2, FedRAMP), Deficiency analysis and remediation tracking, Cross-functional stakeholder negotiation, U.S. federal clearance eligibility
Preferred skills
Advanced-tier GRC certification (CRISC, CGRC, CIA, etc.), Experience with GRC technologies, AI tooling proficiency
Technologies
NIST CSF 2.0, NIST 800-53, ISO/IEC 27001, AICPA Trust Services Criteria, COSO, COBIT, FedRAMP, GRC platforms
Responsibilities
Execute second-line assurance activities and maintain assigned control areas; Perform integrated IT control testing and validate control design; Identify, analyze, and report risks with defensible reasoning; Drive closure of control deficiencies and exceptions; Maintain Risk and Control Matrices and risk registers; Partner with engineering to embed automated controls; Support internal and external audits (SOX, SOC 2, FedRAMP); Translate framework requirements into implementable control language.
Seniority
Senior, hands-on IC
