CareerPlan

Senior Staff GRC Analyst

US - Texas - AustinFull-time$163k–$224k2026-10-02 → 2026-11-10
On-site

Core

Own the end-to-end Cyber Essentials and Cyber Essentials Plus certification program, ensuring controls are audit-ready for UK public sector and enterprise customers.

Role type

Senior Staff GRC Analyst (Security Compliance)

Builds

Cyber Essentials certification program and associated control validation processes

Domain

Cybersecurity compliance and IT audit

Required skills

Cyber Essentials Plus certification ownership, technical control validation, security compliance program management, influence without authority, GRC platform proficiency, ISO 27001/SOC 2/NIST CSF familiarity

Preferred skills

CISA, CISM, CISSP, ISO 27001 Lead Auditor certifications, automation of compliance processes

Technologies

Intune, Okta, AWS

Responsibilities

Manage annual Cyber Essentials Plus certification cycle from scoping to renewal; validate five technical controls (firewalls, secure configuration, user access, malware protection, updates); drive remediation of control gaps; serve as primary contact for external certification body; align Cyber Essentials with ISO 27001 and SOC 2 programs; report program status and risks to leadership

Seniority

Senior Staff, hands-on IC with mentorship responsibilities