Risk & Compliance Analyst
Core
Monitor, evaluate, and maintain IT security frameworks, policies, standards, and controls; execute compliance and audit activities; and identify/remediate control gaps.
Role type
Mid-level IC Risk & Compliance Analyst (IT Security/GRC)
Builds
Actionable security controls, policies, procedures, testing requirements, and compliance activities
Domain
Information Security, IT Risk, Compliance, Audit, Cloud/Hosted Environments
Required skills
IT security, IT risk, compliance, audit principles, control frameworks, cloud/hosted environment technical understanding, scripting, automation, data analysis, project management, analytical thinking, problem-solving, organizational skills
Preferred skills
Generative AI, large language models, AI agents, AI-enabled automation, APIs, workflow tools, data analysis tools, cloud/SaaS/hosted environment audit experience
Technologies
Cloud, SaaS, hosting, infrastructure, identity, network, security, generative AI, large language models, AI agents, AI-enabled automation, scripting, APIs, data analysis tools, workflow tools
Responsibilities
Execute and monitor compliance activities related to IT security frameworks; coordinate and support internal/external IT security audits; review and evaluate technical audit evidence from cloud and technology environments; translate industry standards and regulatory requirements into actionable security controls; independently manage assigned compliance projects and workstreams; identify opportunities to automate compliance and audit activities; assist sales team with security questionnaires
Seniority
Mid-level, hands-on IC
