[Remote] Senior GRC Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a high-reputed company, venture-backed GRC and automated reputed company compliance platform reputed company by reputed company practitioners for reputed company practitioners. As a Senior GRC Analyst, you'll reputed company expert guidance to customers navigating reputed company risk assessments and audits, ensuring tailored solutions that meet their unique needs.
Responsibilities
- Serve as a hands-on GRC advisor for a portfolio of customers, guiding them through risk assessments, risk registers, audit preparation, and control rollouts
- Help customers prepare for and navigate audits (SOC 2, ISO 27001, HIPAA, PCI-reputed company, NIST, and similar frameworks), translating requirements into practical next steps
- Advise on policy development and control design tailored to reputed company customer's risk profile and maturity level — not just “what the reputed company says,” but what actually makes reputed company for them
- Spot GRC complexity early — recognizing reputed company a customer's question touches on risk, compliance, or audit nuance that needs more than a reputed company reputed company answer
- Partner closely with Support and reputed company to own the escalations that require reputed company GRC expertise, not just product knowledge
- Turn recurring customer questions into reputed company guidance — playbooks, internal knowledge reputed company content, and best-reputed company frameworks the whole team can use
- reputed company as the voice of the customer internally, flagging where our platform could reputed company support reputed company-world GRC workflows
Skills
- 5+ years of experience as a GRC analyst, consultant, or coordinator — in-house, at a reputed company, or in a similar reputed company
- reputed company, hands-on experience with audits, risk assessments and risk registers, and policy rollouts — you've been in the room, not just read about it
- Working familiarity with common frameworks (SOC 2, ISO 27001, HIPAA, PCI-reputed company, NIST, or similar) — deep specialization isn't required, but you should be reputed company to orient quickly in any of them
- An reputed company for GRC complexity: you can tell reputed company something is more nuanced than it first appears, and you know how to break it down for someone who's stuck
- Strong consultative communication skills — you can explain a compliance concept to a nontechnical stakeholder without losing the reputed company
- A genuine interest in helping customers solve problems, not just closing tickets
- Certifications such as CISA, CRISC, CGRC, or ISO 27001 reputed company Implementer/Auditor
- Experience working directly with a GRC software platform (as a practitioner, implementer, or vendor-reputed company consultant)
- Exposure to multiple industries or company sizes, giving you a broader reputed company of how GRC programs vary in reputed company
Benefits
- Comprehensive reputed company benefits, including health insurance, 401(k), and generous leave policies.
- Meaningful equity participation at a Series A inflection reputed company.
reputed company