Security GRC Analyst, Forward Deployed Assurance
Core
Bridge the gap between Security & Compliance requirements and Engineering implementation by evaluating control design, implementation, and operation across systems and architectures.
Role type
Senior Security GRC Analyst (Forward Deployed Assurance)
Builds
Scalable governance requirements, actionable technical controls, and risk assessment frameworks for engineering teams.
Domain
Enterprise Technology & Infrastructure / Cloud Security / AI Governance
Required skills
Security controls and frameworks (NIST, ISO 27001, SOC, SOX, FedRAMP), cloud security, IAM, platform engineering, system architecture understanding, regulatory compliance translation, M&A risk assessment, incident response analysis.
Preferred skills
Independent control testing, audit practices, AI security, emerging technology regulations.
Technologies
Cloud environments, APIs, engineering workflows, AI platforms.
Responsibilities
Support technical liaison between Assurance, Engineering, Product Security, and Legal; Evaluate control implementation in applications and infrastructure; Create feedback loops to refine control design; Translate regulatory expectations into technical requirements; Execute second-line oversight and audit protocols; Assess risk exposure during M&As; Monitor emerging regulatory frameworks (e.g., EU AI Act); Support enablement, change management, and training; Participate in incident reviews and root-cause analysis; Track compliance metrics for leadership reporting.
Seniority
Mid-level (2-3 years experience), hands-on IC.
