Senior GRC Analyst

About Our Client:

The organization operates within the intelligent workflow technology sector, focusing on empowering IT and security teams through automation solutions. It addresses the challenge of integrating diverse applications and services across technology stacks by providing a secure, vendor-agnostic platform compatible with any API-enabled service. The platform emphasizes security and privacy by design, supporting a broad range of commercial certifications and compliance standards, demonstrating a commitment to protecting customer environments.

About the Opportunity:

The SENIOR GOVERNANCE, RISK, AND COMPLIANCE ANALYST role is responsible for executing and managing compliance programs across multiple certifications and regulatory frameworks during a critical growth phase. This position ensures ongoing audit readiness, supports vendor risk management, and responds to customer security requirements. The role contributes by maintaining and enhancing the organization's security posture, automating compliance processes, and collaborating across teams to embed compliance throughout organizational operations.

Responsibilities:

• Manage end-to-end audit cycles for SOC 2 Type II, ISO 27001, 27701, and 42001 certifications
• Support FedRAMP program activities including gap analysis and remediation
• Conduct continuous control monitoring and evidence management
• Perform vendor security assessments and participate in third-party risk management
• Carry out risk assessments and implement mitigation controls
• Respond to customer security inquiries and maintain trust documentation
• Collaborate with Legal on contract security and compliance reviews
• Automate compliance workflows and evidence collection
• Develop and maintain security policies and procedures
• Partner with various departments to integrate compliance requirements
• Monitor regulatory changes relevant to the business and customers

Requirements:

• 8-12 years in IT compliance, security, or risk management
• Practical experience with ISO 27001 implementation and maintenance
• Strong knowledge of SOC 2 compliance and audit processes
• Experience supporting FedRAMP certifications
• Skilled in vendor security assessment and risk analysis
• Solid understanding of information security principles and controls
• Proven project management capabilities
• Excellent communication skills for diverse stakeholders
• Background in audit or gap remediation for certifications
• Relevant certifications such as CISSP, CISA, or CISM
• Familiarity with compliance automation and scripting for evidence
• Experience in continuous monitoring and compliance reporting
• Knowledge of cloud security (AWS, Azure, GCP)
• Contract review experience related to security and compliance
• Experience in SaaS or technology sectors
• Understanding of privacy regulations like GDPR and CCPA
• Comfortable working in remote-first settings

Pay Range and Compensation Package:

• Target annual compensation between $175,000 and $190,000

Equal Opportunity Statement: Our client is an equal opportunity employer. They celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, or national origin.

Note:

RemoteHunter is a recruitment partner of this role. Please note that all employment decisions, including candidate assessment, interviews, hiring, compensation, and employment terms, are made exclusively by the hiring employer.