Senior Security GRC Analyst
Core
Lead security compliance programs and drive audit readiness for SOC 2 Type II and PCI DSS, acting as the connective tissue between Engineering, IT, Finance, Legal, and business control owners.
Role type
Senior individual contributor GRC analyst
Builds
SOC 2 Type II and PCI DSS compliance frameworks and audit readiness
Domain
Cybersecurity, GRC, Fintech/Marketplace
Required skills
SOC 2 Type II audit ownership, PCI DSS audit ownership, cross-functional coordination, control mapping, exception management, policy development, GRC tooling proficiency, cloud security assessment (AWS), IAM knowledge, encryption framework knowledge
Preferred skills
CISA, CISM, CISSP certification, experience scaling compliance programs, familiarity with Vanta/Drata/ZenGRC, regulated industry experience
Technologies
Vanta, Drata, ZenGRC, AWS
Responsibilities
Own the compliance calendar and drive end-to-end audit readiness for SOC 2 Type II and PCI DSS; coordinate evidence collection across multiple teams; serve as primary liaison with external auditors; track open audit findings and remediation commitments; manage the security exception process; develop and enforce security policies and standards; establish and report on compliance metrics.
Seniority
Senior, hands-on IC
