Senior GRC Analyst

📋 Description

• Lead the governance, risk, and policy program.
• Drive compliance with ISO 27001, SOC 2, NIST, PCI DSS, GDPR, and more.
• Manage enterprise risk assessments and maintain the risk register.
• Oversee third‑party risk management and vendor onboarding.
• Lead audit readiness and liaise with auditors.
• Support client inquiries and RFPs on security and privacy.
• Mentor junior team members and promote proactive GRC practices.

🎯 Requirements

• 5+ years in cybersecurity, governance, risk, or privacy.
• Strong knowledge of ISO 27001, NIST, SOC 2, PCI DSS, GDPR, PIPEDA.
• Hands-on with GRC tools: OneTrust, Hyperproof, AuditBoard, Drata.
• Lead enterprise risk assessments and maintain risk registers.
• Oversee third‑party risk management (TPRM) and vendor onboarding.
• Support client due diligence (security questionnaires, RFPs).
• Clear communication of risk to technical and non‑technical teams.
• Organizational and project management skills; cross‑functional leadership.
• Certifications such as CISM, CRISC, CISSP, CISA valued.

🎁 Benefits

• Flexible hybrid work model.
• DEIB‑focused culture with employee resource groups.
• Growth opportunities and meaningful work.
• Accommodations available during hiring.