Senior Security Governance & Compliance (GRC) Analyst

Role overview

Senior Security Governance, Risk & Compliance GRC Analyst at Alma. In this role you will help build and maintain Alma's security program, drive risk assessments and regulatory compliance across products and operations, and partner with cross functional teams to implement effective controls. You will prepare for audits, manage policy lifecycle, and monitor risk indicators to protect customer data and maintain trust.

Responsibilities

• Develop and maintain Alma's GRC program, policies and controls.
• Conduct risk assessments, control testing, and remediation tracking.
• Map regulatory requirements to technical controls and processes.
• Coordinate vendor due diligence and third party risk management.
• Support audits, remediation actions, and evidence collection.
• Collaborate with Product, Engineering, Legal and Security teams to strengthen the security posture.

Required qualifications

• 5+ years in information security, risk management or compliance.
• Knowledge of risk management frameworks such as NIST and ISO 27001.
• Strong analytical and communication skills; ability to influence cross-functionally.
• Experience with policy development, training and awareness programs.
• Certifications such as CISM, CRISC, CISSP preferred.

About Alma

Alma is a company dedicated to building secure, compliant software solutions. This role offers the opportunity to shape the security program at a growing organization.