Senior GRC Analyst - Information Security
Core
Strategic partner building and maturing the GRC program for an electric aviation company, focusing on information security, regulatory compliance, and risk management across engineering, manufacturing, and defense operations.
Role type
Senior GRC Analyst (Information Security)
Builds
Enterprise GRC capabilities, risk frameworks, and compliance programs for aerospace and defense sectors
Domain
Aerospace & Defense / Information Security / Regulatory Compliance
Required skills
GRC frameworks (NIST CSF, ISO 27001, CMMC), audit coordination, risk assessment, policy development, regulatory translation, vendor security assessments, cross-functional collaboration
Preferred skills
Defense industry experience, OT/ICS security knowledge, GRC platform administration, privacy regulations familiarity
Technologies
Vanta, Upguard, Slack, Jira, Confluence
Responsibilities
Design and mature GRC frameworks aligned with industry standards; coordinate internal and external audits and certifications; lead buildout of InfoSec GRC capabilities including risk assessments and policy development; develop scalable GRC processes and tools; conduct comprehensive risk assessments across IT and OT systems; develop risk treatment plans and monitor remediation; translate regulatory requirements into actionable controls; monitor regulatory landscape for emerging obligations; support control testing and validation; conduct vendor security assessments and due diligence; work across departments to embed GRC practices; drive continuous improvement of GRC processes
Seniority
Senior, hands-on IC