Senior Analyst, GRC
Core
Senior GRC Analyst responsible for maintaining compliance, managing risk assessments, and ensuring audit readiness for a veterinary emergency care company.
Role type
Senior IC GRC Analyst
Builds
Compliance programs, risk registers, and audit evidence packages
Domain
Healthcare / Veterinary Emergency Services / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
GRC frameworks (PCI DSS, NIST, SOC 2, ISO 27001), GRC platform proficiency, risk assessment, policy documentation, risk register management, stakeholder partnership
Preferred skills
AI tool risk assessment, remediation tracking, exception management
Technologies
Hyperproof, Archer, OneTrust
Responsibilities
Conduct third-party and AI tool risk assessments and track remediation; Collect and maintain evidence for PCI DSS and privacy compliance; Document security controls and support internal/external audits; Update policies, standards, and baselines; Maintain the risk register and support quarterly risk reporting; Partner with control owners across IT, Engineering, and Legal
Seniority
Senior, hands-on IC