Senior GRC Analyst

• Coordinate audits across ISO 27001, SOC 2, PCI DSS, HIPAA, NIS2, SOX, and C5
• Manage auditor relationships
• Drive evidence collection and track remediation activities to completion
• Perform control assessments and testing across technical and administrative domains
• Partner with engineering and security teams to evaluate control design and effectiveness
• Collaborate with Engineering, Security, IT, and Product stakeholders to understand technical architectures
• Translate technical architectures into audit-ready control narratives
• Leverage AI tools, automation, and emerging technologies to streamline evidence collection, control testing, and reporting
• Administer and enhance GRC platforms
• Develop metrics and dashboards providing visibility into compliance posture and control effectiveness

• 4+ years of experience in information security compliance, audit, or risk management within a technology environment
• Strong understanding of cloud architecture, IAM, infrastructure, and SDLC controls
• Experience working with one or more compliance frameworks, such as ISO 27001, SOC 2, PCI DSS, HIPAA, NIST 800-53, or NIS2
• Strong audit communication skills, including managing auditors, evaluating evidence requests, and defending control positions
• Active use of AI tools to improve productivity
• Experience with compliance automation, continuous monitoring initiatives, or GRC platform development (bonus)
• Experience with Thoropass, AuditBoard, or Drata (bonus)
• Experience building AI-driven workflows or automations (bonus)
• Experience integrating GRC tooling with engineering, cloud, identity, or monitoring platforms (bonus)
• Experience implementing continuous assurance capabilities (bonus)

• Comprehensive health benefits
• Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days
• Tuition reimbursement
• Instructor-led and on-demand learning and development programs
• The Thrive Global Wellness Program
• Confidential Employee Assistance Program (EAP)
• Wellness app and one-on-one wellness coaching
• Employee Resource Groups (ERGs)
• GoTo Gives
• Charitable matching
• Flexible work arrangements, including working from home