Senior GRC Analyst
Core
Senior GRC Analyst responsible for structuring and evolving the GRC front, ensuring compliance with processes and controls, and supporting the company in managing information security and privacy risks.
Role type
Senior GRC Analyst
Builds
Compliance programs (ISO 27001, SOC 2, GDPR, LGPD), risk management frameworks, and security policies
Domain
Cybersecurity / Information Security / Privacy
Deliverable
dashboards & analysis
Required skills
ISO 27001, SOC 2, GDPR, LGPD, internal and external audits, risk assessment, policy creation, stakeholder communication
Preferred skills
Vanta platform, process automation, security awareness training
Technologies
Vanta
Responsibilities
Manage and maintain ISO 27001, SOC 2, GDPR, and LGPD programs; Administer the Vanta platform; Coordinate internal and external audits; Map and evaluate corporate and information security risks; Create and maintain security and privacy policies; Structure and monitor GRC indicators and governance reports; Support security diligence, RFPs, and client questionnaires; Partner with Security, Engineering, and other teams; Support security awareness and training initiatives; Identify opportunities for process improvement and automation.
Seniority
Senior, hands-on IC
