Lead GRC Analyst

📋 Description

• Establish and maintain security policies, standards, and controls aligned with industry frameworks (NIST, ISO 27001, PCI, SOC 2).
• Develop a metrics and reporting framework to assess the effectiveness of security and privacy programs.
• Organize information security risk assessment process, including oversight of treatment efforts.
• Assist with compliance audits and projects (SOC 1, SOC 2, ISO 27001, ISO 27701, PCI-DSS, Tx-RAMP, and more).
• Manage privacy program to ensure compliance with GDPR, CPRA, CCPA, PIPEDA.
• Execute Privacy Impact Assessments (PIAs) and support continuous controls monitoring and automation.

🎯 Requirements

• Education: Bachelor's Degree; 5+ years tech project/program management.
• Experience: Able to work effectively in an agile team.
• Security audits: Manage PCI, ISO, SOC 1, SOC 2, NIST.
• Privacy audits: GDPR, CPRA, CCPA, PIPEDA.
• GRC tooling: Implemented or maintained Drata or similar.
• Certifications: CISSP, CIPP/EU, CIPM, Security+, CISA, PMP (preferred).

🎁 Benefits

• Momentum: 12M+ users across 120 countries.
• Innovative team: finance, tech, and AI leaders.
• Culture that empowers: competitive pay, flexible work, inclusive.
• Career that matters: drives efficiency and smarter decision-making.