Senior Security Risk Analyst, GRC

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the global risk management process, which includes risk assessment and treatment planning.

• Negotiate treatment strategies with risk and control owners.

• Convert regulatory and framework modifications into effective controls.

• Evaluate daily control operations and analyze threat intelligence.

• Manage policy exceptions through compensatory controls or cases of risk acceptance.

• Responsible for risk reporting related to security or engineering domains.

• Act as a primary risk contact to achieve measurable risk reduction.

• Collaborate and communicate within GRC and security teams, as well as across the organization.

• Develop automation solutions and contribute to shaping the team's strategy and tools.

• Conduct risk assessments and prepare reporting.

• Assist with exception requests.

• Aid in the automation of tools and processes to maintain an accurate risk register.

• Perform in-depth analyses of business controls, identify issues, and proactively mitigate risks.

• Report to the Senior Security Risk Manager within the GRC team of the Security organization.

⛳️ Requirements

• A minimum of 4 years of experience in security risk, GRC, or a comparable field.

• Bachelor's degree in a technology-related discipline, or equivalent experience of an additional 4 years in a technology sector.

• Proficiency in risk management frameworks, especially the NIST Cybersecurity Framework (CSF).

• Capability to articulate technical risk to both technical and non-technical stakeholders.

• Excellent written and verbal communication abilities.

• Skill in transforming complex control requirements into straightforward, actionable guidance.

• Experience with ownership of risk metrics and reporting.

• Background in automating workflows, or a keen interest in agentic AI workflows.

• Familiarity with implementing or using GRC tools (preferred).

• Experience with AI-related risk (preferred).

• Background in controls assurance and effectiveness testing (preferred).

🏝️ Benefits

• Equity grants.

• 401(k) plan with employer matching.

• 16 weeks of paid parental leave.

• Wellness benefits.

• Commuter benefits match.

• Paid time off.

• Paid sick leave.

• Medical, dental, and vision benefits.

• 11 paid holidays.

• Disability insurance.

• Basic life insurance.

• Family-forming assistance.

• Mental health program.

• Flexible paid time off/vacation for salaried positions.

• 80 hours of paid sick time annually for salaried positions.

• Wellness expense reimbursement.

• Premium healthcare.