Principal Security Governance, Risk & Compliance Analyst
Core
Strategic leader responsible for designing, implementing, and continuously improving the cybersecurity governance, risk, and compliance program to manage cyber risk while enabling business growth.
Role type
Principal Information Security GRC Analyst
Builds
Cyber risk management program, SOC 2 Type II compliance program, AI governance program, security policies, and executive reporting on cyber risk.
Domain
Cybersecurity, Risk Management, Compliance, AI Governance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Cyber risk management program design, SOC 2 Type II compliance leadership, SOX ITGC support, AI governance framework development, cybersecurity risk assessment, security policy development, third-party risk management, executive reporting, automation of GRC processes
Preferred skills
Cloud-native SaaS environment experience, AWS security principles knowledge, NIST AI Risk Management Framework alignment
Technologies
SOC 2, NIST, ISO 27001, GDPR, CCPA, AWS
Responsibilities
Lead strategic direction and maturity of the GRC program; Build cyber risk management program including assessments and risk registers; Lead and mature SOC 2 Type II compliance program; Partner with Internal Audit for SOX ITGCs; Develop and maintain security policies and governance processes; Build and operationalize AI Governance program; Perform cybersecurity risk assessments for cloud, apps, infrastructure, and vendors; Lead third-party security risk management; Support customer trust via security questionnaires and reviews; Partner with Privacy and Legal on data classification and regulatory compliance; Develop executive reporting on cyber risk and compliance posture; Drive automation and continuous improvement across GRC processes.
Seniority
Principal, strategic leadership & hands-on execution
