Senior Analyst, GRC
Core
Senior Cybersecurity Risk Analyst managing end-to-end risk lifecycle, mapping technical findings to root-cause risks, and aligning controls with frameworks.
Role type
Senior IC cybersecurity risk analyst (GRC)
Builds
Risk registers, control gap analyses, and actionable risk statements for cloud/SaaS ecosystems
Domain
Cybersecurity / Governance, Risk, and Compliance (GRC)
Deliverable
production ML models | dashboards & analysis
Required skills
Risk lifecycle management, issues-to-risk mapping, risk-to-control mapping, technical risk assessment, stakeholder partnership, data quality ownership, AI tooling fluency, cloud security knowledge, security framework alignment
Preferred skills
High-growth SaaS experience, DevOps/CI/CD security controls, modern GRC platforms, CRISC/CISM/CISSP certifications
Technologies
Jira, Google Workspace (Sheets, Docs, Slides), AWS, GCP, Azure, ISO/IEC 27001, SOC 2, NIST CSF, NIST 800-53
Responsibilities
Manage individual risks end-to-end (assessment, scoring, treatment, acceptance, closure); Map findings from pen tests/audits/scans to root-cause risks; Map risks to mitigating controls; Evaluate cloud/SaaS configuration issues and translate to actionable risk statements; Partner with architects/engineers to validate severity and agree on treatment; Maintain data quality in the risk register; Use AI tooling to accelerate risk drafting, evidence summarization, and reporting
Seniority
Senior, hands-on IC
