Senior GRC Analyst

Job summary

The role involves joining the Information Security team as a Senior GRC Analyst, focusing on governance, risk, and compliance as the organization scales. The position requires collaboration with various teams to ensure compliance and security across the business.

Qualifications

• Significant experience in Security GRC and auditing processes, with direct involvement in internal and external audits.
• Proven collaboration with engineering, risk and compliance, procurement, legal, and finance teams to implement controls.
• Strong understanding of cloud architectures (AWS or equivalent) and their relation to security controls.
• Familiarity with AI-enabled compliance and workflow automation tools.
• Experience in designing metrics and reporting for GRC programs, including dashboards.
• Background in fintech, payments industry, or IT audit, with knowledge of regulatory expectations.
• Relevant certifications (ISO 27001 Lead Implementer/Auditor, CISSP, CISA, PCI-related) and a degree in Cybersecurity, Engineering, or related fields is advantageous.

Responsibilities

• Automate legacy systems related to governance, risk, and compliance frameworks.
• Integrate GRC workflows with internal systems to support compliance.
• Design scalable GRC architectures for evidence collection and compliance reporting.
• Draft and maintain security policies aligned with control standards.
• Handle security requests from customers and prospects accurately.
• Conduct third-party vendor assessments against compliance standards.
• Track and report on compliance metrics and KPIs for leadership visibility.
• Translate compliance requirements into technical specifications for engineering teams.
• Coordinate complex, multi-team workstreams to ensure timely delivery.
• Contribute to broader Cybersecurity initiatives and goals.

Skills

• Strong analytical and problem-solving skills.
• Ability to work collaboratively with non-technical stakeholders.
• Initiative in developing time-saving solutions.

Education

• A degree in Cybersecurity, Engineering, Computer Science, Mathematics, or equivalent experience is preferred.

Tools

• Familiarity with compliance automation tools and cloud platforms (AWS or equivalent).