Security Analyst III
Core
Execute day-to-day GRC operations, manage third-party risk assessments, and champion customer trust to protect corporate assets and web applications.
Role type
GRC Security Analyst
Builds
Security compliance posture and risk management frameworks for a SaaS company
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Third-party risk management, GRC operations, vendor security questionnaires, SOC 2 compliance, ISO 27001 compliance, security awareness training, regulatory compliance, security metrics collection, cross-functional collaboration
Preferred skills
Cloud environment familiarity (AWS, GCP, Azure), risk management principles, GRC automation, AI tool usage
Technologies
NIST 800-53, ISO 27001, SOC 2, AWS, GCP, Azure
Responsibilities
Conduct third-party vendor risk assessments and internal risk evaluations; respond to vendor security questionnaires; track evidence for SOC 2 and ISO 27001 audits; identify emerging threats and collaborate on security solutions; deliver security awareness training; ensure compliance with outside regulations; collect and maintain security metrics; partner with Legal, Engineering, IT, Finance, and HR; identify operational inefficiencies in security controls.
Seniority
Mid-level, hands-on IC
