Staff Security Analyst II (GRC)
Core
Lead internal IT and security control assessments and manage audit engagements to ensure product and internal processes meet regulatory and industry standards.
Role type
Staff Security Analyst II (GRC)
Builds
IT and security control frameworks, audit readiness, and compliance posture documentation
Domain
Cybersecurity, Governance, Risk, and Compliance (GRC)
Required skills
IT and security control frameworks expertise, control testing and remediation tracking, audit management, regulatory compliance knowledge, stakeholder management, analytical problem-solving
Preferred skills
AI compliance frameworks knowledge, CISA/CISM/CISSP certification
Technologies
ISO 27001, ISO 27701, ISO 22301, SOC1, SOC2 Type II, ISO 42001
Responsibilities
Lead internal IT and security control assessments aligned with best practice standards, identify control deficiencies and drive remediation, support evidence collection for internal and external audits, plan and coordinate audit activities, manage report reviews and track remediation to closure
Seniority
Staff, hands-on IC with strategic oversight