Senior Security GRC Analyst

Owning the day-to-day compliance program and customer security assurance function, the full-time Senior Security GRC Analyst will work remotely to mature the overall GRC program, automating processes and collaborating with cross-functional teams including People, Legal, IT, and Engineering. Key responsibilities Own and mature the compliance framework, including continuous controls monitoring and audit coordination Automate GRC evidence collection and risk management workflows using compliance platforms and AI tools Manage the third-party risk management program, including vendor security assessments and continuous monitoring Required qualifications 3-5 years of experience in security GRC, compliance, or customer assurance programs in high-growth environments Hands-on security knowledge in designing and developing technical controls (IAM, endpoint, cloud infrastructure) Experience with SOC 2 or equivalent and customer assurance processes Proficiency with compliance platforms and continuous controls monitoring tools (e.g., Vanta, Drata) Experience leveraging AI tools for GRC workflows