Security GRC Analyst Job at Blockchain (Buenos Aires)

Security GRC Analyst

Monarch is seeking a Security GRC Analyst to join our Security team during a per...

Location

United States; Canada; LATAM

Salary:

130000.00 - 180000.00 USD / Year

Monarch Money

Expiration Date

Until further notice

Requirements

3-5 years operating and scaling mature GRC, compliance, or customer assurance programs in high-growth environments
Hands-on experience with customer assurance (security questionnaires, evidence requests, RFPs)
Hands-on experience with SOC2, CCPA/GDPR compliance and understanding of other frameworks (e.g. ISO 27001)
Hands-on experience with Continuous Controls Monitoring and compliance automation tools (Vanta, Drata, Oneleet, SafeBase, or similar)
Strong written communication skills to support internal and external engagements such as customer-facing responses
Comfort with ambiguity and building process from scratch
Ability to identify process anti-patterns (manual evidence requests, one-off questionnaires, duplicate controls) and replace them with durable, automated solutions

Job Responsibility

Scale, automate, and optimize existing GRC, compliance, and customer assurance programs, including security questionnaires, evidence requests, trust center content, and knowledge base
Optimize and automate an existing third-party risk program by improving risk signal quality, automating evidence collection, and reducing assessment cycle time
Evaluate, implement and maintain GRC tooling (Vanta, Drata, SafeBase, etc.) with a focus on AI-powered automation to minimize operational overhead
Mature existing SOC 2 program by strengthening continuous controls monitoring, reducing audit prep effort, and increasing confidence in automated evidence completeness
Research, recommend and implement additional frameworks and attestations (ISO 27001, CSA STAR, etc.) to position Monarch as a security leader in personal finance

What we offer

Work wherever you want! As a fully remote company with no central office
Competitive cash and equity compensation in a hyper growth, early stage company
Stipend to set-up your ideal working environment
Competitive Benefit Plans for employees based on your location (e.g. in the US we offer: Medical, dental and vision benefits and the ability to contribute to a 401k plan)
Unlimited PTO
3 day weekend every month! We take off the “First Friday” every month to focus on rest, recuperation, or just having fun!

Fulltime

Security GRC Analyst

Juni is seeking a Security GRC (Governance, Risk, and Compliance) Analyst to pla...

Location

Sweden , Stockholm; Gothenburg

Salary:

Not provided

Juni

Expiration Date

Until further notice

Requirements

2 to 4 years of experience in information security governance, risk, or compliance roles
Demonstrated experience with compliance frameworks and regulations (e.g., PCI DSS, ISO 27001, GDPR, PSD2, EBA outsourcing and DORA)
Degree in Cybersecurity or Information Systems or similar
Knowledge of security frameworks (e.g., CIS Controls, NIST CSF)
Solid understanding of risk assessment methodologies and hands-on experience with risk registers and third-party risk management
Experience in coordinating activities for security certifications and audits
Ability to develop and track security metrics (KPIs)
Strong analytical, problem-solving, and organisational skills
Excellent communication skills, comfortable presenting to various stakeholders
A proactive and independent worker who is also a strong team player

Job Responsibility

Maintain and update core security documentation, including policies, procedures, and instructions, ensuring they remain current and relevant
Identify, collect, and analyse data to track key security performance indicators (KPIs) and metrics, generating reports and dashboards to communicate security performance to stakeholders
Maintain the risk register and support daily risk management activities with growing independence
Follow up on the remediation of risks identified in new projects, third-party engagements, and other business initiatives
Conduct thorough security posture assessments of new vendors and perform periodic reviews of existing ones
Support our 3rd party procurement process
Monitor the implementation and effectiveness of security controls across the organisation
Coordinate and support activities to maintain key security certifications, including PCI-DSS and ISO 27001
Coordinate and support the implementation of remediation plans to address identified compliance gaps
Provide support in responding to security-related questions during partner due diligence and assist in providing necessary information for cyber insurance renewals

What we offer

Work hybrid
Meet all Junis IRL at the company onsite each year
Diversity is at our core
Progress your career whether you choose to manage people or not
Stock options
Vacation 30 days
Private Health insurance
Beautiful offices in central Gothenburg and Stockholm, front row sea view

Fulltime

Security GRC Analyst

We’re looking for a Security GRC Analyst to help support and advance Intercom’s ...

Location

Ireland , Dublin

Salary:

Not provided

Intercom

Expiration Date

Until further notice

Requirements

Experience building collaborative relationships with a diverse range of stakeholders, including executive leadership, management, Legal, Privacy, Engineering, and external auditors
Experience with cloud security practices, including tooling, strategy, and methodology
experience with AWS security is preferred
Knowledge of information security technologies, compliance and regulatory requirements, information governance, and privacy best practices
Knowledge of common information security management frameworks, such as ISO/IEC 27001, SOC 2, and HIPAA, as well as NIST frameworks including 800-53 and the NIST Cybersecurity Framework
Demonstrates a high level of personal integrity, with the ability to handle confidential information professionally and exercise sound judgment and maturity
Demonstrates the ability to scope, plan, and delegate work effectively
Demonstrates strong cross-functional communication skills, both written and verbal
Demonstrates a high degree of autonomy and ownership in their approach to work

Job Responsibility

Develop, enhance, and operationalise entity-level security and privacy policies, processes, and controls to mitigate risk and comply with applicable laws and regulations
Continuously monitor and assess Intercom’s security and privacy controls, working closely with teams such as Legal, Engineering, Sales, and Customer Support to refine and improve control design
Drive the implementation of security assurance strategies, including ownership of internal and external assurance resources and improvements to Intercom’s security assurance materials
Maintain and manage the enterprise security risk register, partnering with senior leaders to identify, assess, and reduce security risks
Improve operational efficiency through process improvements, technical solutions, and automation where possible

What we offer

Competitive salary and equity in a fast-growing start-up
We serve lunch every weekday, plus a variety of snack foods and a fully stocked kitchen
Regular compensation reviews – we reward great work!
Pension scheme & match up to 4%
Peace of mind with life assurance, as well as comprehensive health and dental insurance for you and your dependents
Flexible paid time off policy
Paid maternity leave, as well as 6 weeks paternity leave for fathers, to let you spend valuable time with your loved ones
If you’re cycling, we’ve got you covered on the Cycle-to-Work Scheme, with secure bike storage too
MacBooks are our standard, but we also offer Windows for certain roles when needed

Fulltime

Senior Cyber Security GRC Analyst

We are currently seeking a Senior Cyber Security GRC Analyst to join FinXL and t...

Location

Australia , North Sydney

Salary:

Not provided

FinXL

Expiration Date

Until further notice

Requirements

Experience as a Senior Cyber Security GRC Analyst
Strong experience in Cyber Security GRC, Risk, or Compliance roles
Experience working with control frameworks such as NIST SP 800-53
Experience writing policies, standards, and control documentation from scratch
Experience conducting control assurance, testing or audit support activities
Experience in stakeholder engagement, running workshops & influencing outcomes
Experience implementing security controls
Experience in control uplift or transformation programs
Experience translating NIST security controls into clear, business-friendly requirements
Experience defining control objectives, parameters & implementation guidance aligned to organisational context

Job Responsibility

Support the definition, documentation & assurance of security controls aligned to NIST SP 800-53

Information Security GRC Analyst

Our Financial Services client has an exciting vacancy within their Information S...

Location

United Kingdom , Liverpool

Salary:

40000.00 - 50000.00 GBP / Year

Broster Buchanan

Expiration Date

Until further notice

Requirements

2 – 3 years’ experience in information security roles
Experience with risk assessment methodologies
Excellent analytical and problem-solving skills with attention to detail
Strong communication skills with the ability to explain complex security concepts to non – technical stakeholders
Knowledge of information security frameworks such as ISO 27001 or NIST
Eligibility to work in the UK

Job Responsibility

Work with all parties across the business to identify and assess risk and ensure mitigations are tracked to completion
Support the development and maintenance of information security policies, standards and procedures in line with regulatory frameworks and industry standards
Support third party risk management processes
Work with Security Operations and IT teams to provide oversight of vulnerability assessments and remediation activities
Manage security architecture reviews for new systems and services
Evaluate security controls and recommending improvements
Support the implementation of security tools and technologies
Provide oversight of the security incident management process
Provide security metrics for interested parties at all levels
Support the security awareness programme to promote a culture of security within all levels of the Group

Fulltime

Senior Security GRC Analyst

Lambda, The Superintelligence Cloud, is a leader in AI cloud infrastructure serv...

Location

United States , San Francisco; San Jose

Salary:

154000.00 - 200000.00 USD / Year

Lambda

Expiration Date

Until further notice

Requirements

Minimum of 8 years of experience supporting cybersecurity risk or controls management programs
In-depth knowledge and experience of cybersecurity frameworks including ISO 27001 and 27701, PCI-DSS, SOC, NIST CSF and other regulatory requirements
Experience managing and running audits, certification programs and control assessments
Experience collaborating closely with engineers, business teams, and security partners
Strong ability to define, drive and execute a program vision, strategy, approach and milestones in alignment with organization priorities and initiatives

Job Responsibility

Validate and verify the organization's security controls and practices meet the requirements of ISO 27001, 27701, PCI, SOC 2 and other relevant regulatory requirements to ensure alignment to business objectives
Manage IT Risk Register including risk identification, tracking, and prioritization
Assist with and drive remediation of control deficiencies and gaps
Provide guidance to Control Owners in the planning, design, implementation, operation, maintenance & remediation of control activities and other supporting requirements (e.g. policies, standards, processes, system configurations, etc.)
Communicate with technical and non-technical stakeholders and leaders on cybersecurity risk and controls management topics and program-specific reporting
Assist with the Customer Trust program which may include managing customer assessments, and security questionnaires
Assist control owners with root cause analysis and track risk management action plan progress
Create risk metrics for management regarding information security control maturity, compliance status, risks, performance and findings
Assist with the third-party risk management assessment process, ensuring consistent enforcement of information security requirements

What we offer

Generous cash & equity compensation
Health, dental, and vision coverage for you and your dependents
Wellness and commuter stipends for select roles
401k Plan with 2% company match (USA employees)
Flexible paid time off plan

Fulltime

Senior GRC Analyst, Security

The GRC Analyst is responsible for supporting the organization's information sec...

Location

India , Bangalore

Salary:

Not provided

Ethos

Expiration Date

Until further notice

Requirements

Bachelor’s degree in Information Security, Computer Science, Cybersecurity, or a related field
5+ years of experience in information security, risk management and compliance
Strong knowledge of information security frameworks, standards, and regulations (e.g., ISO 27001, NIST, CCPA, PCI-DSS, NYDFS, HIPAA)
Experience with security & privacy risk assessment and management methodologies
Extensive experience in Third Party/Vendor Risk Management (TPRM) with hands-on expertise in managing VRM tools (e.g.,OneTrust, ProcessUnity, Vanta)
Experience in supporting security audits (SOC2, Customer & Partners Audits) - At least 2 complete audit cycles of SOC2
Excellent communication skills, with the ability to convey complex security concepts to non-technical stakeholders
Relevant certifications such as ISO 27001 LA LI, CISA, CRISC are highly desirable

Job Responsibility

Develop, implement, and maintain information security policies and procedures
Ensure alignment of security governance frameworks with business objectives and regulatory requirements
Assist in the creation and maintenance of the information security governance structure
Conduct information security risk assessments and evaluate the effectiveness of existing controls
Identify, assess, and document risks related to information security & privacy across the organization
Conduct regular risk assessments for existing and potential vendors
Monitor and report on the organization’s information security risk posture
Ensure compliance with relevant information security regulations, standards, and frameworks (e.g., ISO 27001, SOC2, ITGC, NIST, PCI-DSS, CCPA, NYDFS, HIPAA)
Conduct regular security compliance assessments and audits
Track and report on compliance gaps and work with relevant teams to address deficiencies

GRC Security Analyst

Perdue is seeking a motivated cybersecurity professional to support and enhance ...

Location

United States , Salisbury

Salary:

73000.00 - 109000.00 USD / Year

Perdue Farms

Expiration Date

Until further notice

Requirements

Bachelor’s degree from an accredited four-year college or university
2-5 years of professional experience in cybersecurity, risk management, security advisory, or GRC operations
Practical understanding of vulnerability management processes, including remediation planning and prioritization
Experience operating or contributing to enterprise risk registers and risk review procedures
Familiarity with GRC or Vulnerability Management platforms
Exposure to policy development, compliance initiatives, and regulatory frameworks such as NIST or CIS controls
Ability to support cross-functional teams and communicate effectively with technical and non-technical stakeholders

Job Responsibility

Define and maintain vulnerability management process and procedure
Align identified vulnerabilities with enterprise risk management practices
Contextualize vulnerabilities based on environmental and business impact
Support remediation planning and prioritization efforts
Define Risk Management operational processes to support risk review and maintain the enterprise risk register
Assist in building and optimizing GRC workflows and compliance automation
Support the definition of risk-related metrics including the development of executive dashboards to visualize risk posture and compliance status
Author, update, and maintain cybersecurity policies and standards
Ensure alignment with regulatory requirements and industry best practices
Support efforts related to cybersecurity regulatory compliance and audit readiness

What we offer

medical/Rx
401(k) with employer match after 1-year
critical illness insurance
accident insurance
dental insurance
vision insurance
life insurance
optional group life insurance
short-term and long-term disability protection
flexible spending accounts

Fulltime

Select Country

Security GRC Analyst

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Security GRC Analyst

Security GRC Analyst

Security GRC Analyst

Security GRC Analyst

Senior Cyber Security GRC Analyst

Information Security GRC Analyst

Senior Security GRC Analyst

Senior GRC Analyst, Security

GRC Security Analyst

Our AI answers in your language