Senior GRC Analyst
Core
Drive global governance, risk, and compliance (GRC) programs, including risk assessments, audit support, control testing, and third-party risk oversight.
Role type
Senior GRC Analyst
Builds
Security assurance framework aligned with ISO 27001, SOC 2, and regulatory requirements
Domain
Cybersecurity, Identity and Access Management, Cloud Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001 audit support, SOC 2 audit support, risk assessment, control testing, third-party risk management, cloud compliance (AWS/Azure/GCP), policy development, remediation planning
Preferred skills
CISM, CISSP
Technologies
ISO 27001, SOC 2, AWS, Azure, GCP
Responsibilities
Conduct enterprise and product-level risk assessments; support external audits and certifications; develop and maintain security policies; perform assurance activities to validate controls; operate third-party risk management program; track and report compliance metrics and risk trends; partner with business units to embed security requirements.
Seniority
Senior, hands-on IC
