Technical GRC Analyst – Compliance & Assurance

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Assess the design and operational effectiveness of technical controls.

• Examine and validate evidence to determine if controls are implemented, functioning effectively, and properly documented.

• Conduct technical risk assessments for new technologies, systems, and business initiatives.

• Collaborate with Engineering and Security to ensure technical controls comply with regulatory requirements and adhere to industry best practices.

• Enhance and support the AI governance program, which includes AI policies, acceptable-use standards, risk assessments, vendor evaluations, and security controls aligned with ISO 42001.

• Convert compliance data into actionable insights that bolster business decisions and enhance program maturity.

• Recognize opportunities to automate compliance tasks and enhance operational efficiency.

• Assist with internal assessments, customer due diligence, and external audits.

• Work alongside Security, Engineering, Product, and business teams to offer practical, risk-based compliance and assurance.

• Develop dashboards and metrics that provide leadership with insights into technical risks and the effectiveness of controls.

• Facilitate customer and audit processes by delivering high-quality evidence and robust technical assurance.

⛳️ Requirements

• 8+ years of experience in technical security, Security GRC, regulatory compliance, or a related field.

• Proven experience in evaluating technical controls and validating supporting evidence.

• Background in conducting technical risk assessments and collaborating with cross-functional teams.

• Experience in technology organizations with modern cloud and enterprise environments.

• Familiarity with FedRAMP authorization processes, including NIST 800-53 control implementation, SSP development, evidence collection, POA&M management, or readiness assessments is highly desirable.

• Strong understanding of cloud and security architecture concepts.

• Solid knowledge of vulnerability and risk management.

• Familiarity with secure software development and DevSecOps concepts.

• Understanding of data protection and encryption practices.

• Knowledge of AI governance and emerging technologies.

• Proficient in dashboard development, reporting, analytics, and automation.

• Capability to translate technical concepts into practical compliance discussions.

• Good judgment in evaluating controls, validating evidence, and balancing compliance needs with practical business requirements.

• Ability to build trusted relationships across various teams.

• Willingness to take ownership and enhance processes.

• Ability to excel in a fast-paced startup environment.

• Must be authorized to work in the U.S. for Tessera Labs.

• Must indicate if immigration sponsorship is required now or in the future.

🏝️ Benefits

• Comprehensive health and wellness benefits.

• Opportunities for professional development and growth.

• Flexible work hours and remote work options.

• Competitive salary and performance-based incentives.