Governance, Risk & Compliance Analyst
Core
Support the development and maintenance of security frameworks, regulatory obligations, and compliance standing for an AI-powered learning platform.
Role type
Junior to Mid-level GRC Analyst
Builds
Security and compliance program for a SaaS learning platform
Domain
SaaS / EdTech / Information Security
Deliverable
dashboards & analysis
Required skills
Risk assessment, policy management, audit support, vendor risk assessment, documentation, regulatory knowledge (GDPR, CCPA, PCI DSS, ISO 27001, SOC 2, NIST CSF)
Preferred skills
Cloud security (AWS, Azure, GCloud), FedRamp framework familiarity
Technologies
AWS, Azure, GCloud, NIST CSF, ISO 27001, SOC 2, PCI DSS, GDPR, CCPA, PIPEDA, FedRamp
Responsibilities
Assist in creation and maintenance of cybersecurity and privacy policies; Participate in cybersecurity risk assessments; Provide support for internal and external audits; Aid in vendor risk assessment; Maintain documentation and reporting; Facilitate cross-functional collaboration; Handle customer security and privacy inquiries
Seniority
Mid-level, hands-on IC
