Senior GRC Analyst Jobs

New

Senior GRC Analyst

We are seeking an experienced Senior Governance, Risk, and Compliance (GRC) Anal...

Location

United States , Chapel Hill

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

5+ years of hands-on experience in GRC, preferably with a focus on acquisition integration
Strong knowledge of regulatory compliance requirements, risk management frameworks, including ISO 27001, NIST
Experience with SOC1/2, GDPR, and privacy frameworks
Proficiency in information security tools, techniques, and controls
Experience with metrics and KPIs to measure and track information security risk
Ability to develop policies, standards, and guidelines
ISO27001:2022 Lead Implementer, and lead auditor certifications are a must
CISA, CISM, CISSP, or CRISC certifications are desirable
Experience with GRC tools, such as Vanta, Archer, ServiceNow Risk modules is highly desirable
Exposure to CMMC/FedRAMP is highly desirable

Job Responsibility

Acquisition Assessment: Collaborate with cross-functional teams to assess the GRC landscape of newly acquired companies, identifying gaps and alignment opportunities
Integration Planning: Develop comprehensive integration plans tailored to each acquisition, ensuring alignment with the company's overarching GRC strategy
Risk Management: Evaluate and mitigate risks associated with integration processes, working closely with risk management teams
Policy and Procedure Harmonization: Bridge gaps between existing practices and those of acquired entities, harmonizing policies, procedures, and controls
Communication and Stakeholder Management: Effectively communicate integration plans and progress, fostering strong relationships with key stakeholders
Reporting and Documentation: Maintain accurate documentation of integration activities and generate insightful reports for senior management
Continuous Improvement: Identify areas for improvement and drive enhancements to the integration process
Customer Security Questionnaire Support: Collaborate with various teams to ensure accurate and comprehensive responses to customer security questionnaires

Senior Security & Compliance Analyst

Become a Senior Security & Compliance Analyst for Bloomreach! You will be an ess...

Location

Slovakia , Bratislava; Brno; Prague

Salary:

3000.00 EUR / Month

Bloomreach

Expiration Date

Until further notice

Requirements

Strong knowledge of industry compliance requirements and standards
Good understanding of SaaS Business
Good understanding of Governance, Risk, and Compliance in IT environment
Outstanding communication and interpersonal abilities
Previous experience as a compliance analyst, compliance officer, compliance manager, or similar position in a related field
Advanced analytical abilities
Effective research skills
Ability to perform under pressure
Experience with ISO security standards
Experience with SOC auditing

Job Responsibility

Perform periodic audits on company procedures and processes and report on the organization’s compliance
Identify, analyze, and resolve compliance issues
Support the sales process by completing RFPs
Ensure that all policies and standards are regularly reviewed and up-to-date
Keep the company’s process mapping and responsibilities structure chart up to date
Develop and update existing compliance policies and related documentation
Proactively research to stay up-to-date with regulations and rules
Communicate regulations to internal and external parties
Assist with management review preparation
Communication with clients across various regions (EMEA, US)

What we offer

Restricted stock units
Company performance bonus
Great deal of freedom and trust
Flexible working hours
Virtual-first work with several Bloomreach Hubs
Company events
5 paid days off to volunteer
People Development Program
Communication coach
Leader Development Program

Fulltime

New

Senior Information Security Compliance Analyst

We're looking for a technically grounded Senior IS Compliance Analyst who speaks...

Location

United States , Chicago

Salary:

90000.00 - 130000.00 USD / Year

Blume Global

Expiration Date

Until further notice

Requirements

Hands-on experience in technical security roles such as Security Operations, Incident Response, Security Analysis, penetration testing, or similar
Practical knowledge of security tools, SIEM platforms, vulnerability management, and security monitoring
and ability to read and understand security logs, configurations, and technical documentation
6+ years of total experience with significant time in GRC
Working knowledge of ISO 27001, NIST frameworks, SOC 1/2, and GDPR requirements
Experience developing and implementing information security policies and controls
ISO 27001:2022 Lead Implementer and Lead Auditor certification

Job Responsibility

Lead technical security assessments and integration of acquired companies, mapping their security architectures and controls to our GRC frameworks, identifying gaps, and building remediation roadmaps that address both technical security and compliance alignment
Bridge technical security and business stakeholders by evaluating risks through a technical lens, working alongside security engineering teams to translate GRC requirements into practical security measures, and communicating effectively across technical and non-technical audiences
Develop and harmonize security policies and control frameworks across acquired entities, ensuring they're both audit ready and operationally sound, while translating between technical security requirements and governance documentation
Own customer security questionnaire responses by leveraging your hands-on security background to provide detailed, accurate answers and collaborating with infrastructure, application security, and operations teams to gather technical evidence
Drive continuous improvement of our GRC program through technical security enhancements, meaningful security and compliance metrics, and process improvements that increase both control effectiveness and operational efficiency

What we offer

health and welfare benefits
tuition assistance
401K savings and other retirement programs
employee assistance programs

Senior Governance, Risk and Compliance Analyst - Governance

Come join the company that is reinventing cloud security and empowering business...

Location

Netherlands

Salary:

Not provided

Wiz

Expiration Date

Until further notice

Requirements

5+ years of experience in one or more of the Governance, Risk, and Compliance domains
Passion for security and keeping Wiz safe
Ability to collaborate with technical and non-technical teams alike to further oversight responsibilities of Security
Deep knowledge of one or more industry frameworks such as ISO 27001, ISO 27017, SOC 2, PCI DSS, NIST CSF, etc. and baseline knowledge of others
Ability to assist with security compliance assessments to ensure compliance with internal and external requirements (ISO, NIST, CIS, etc.)
Experience working in a fast-paced tech environment both independently, and collaboratively within a team environment
Ability to build strong relationships across teams and functions in a global workplace
Applicants must have the legal right to work in the country where the position is based, without the need for visa sponsorship

Job Responsibility

Design and update policies, procedures, and controls to drive confidentiality, integrity, and availability across the Wiz environment
Continuously improve processes, tools, and procedures for audit and compliance management
Collaborate and work cross-functionally across the company to address governance and compliance needs and to support the Wiz Control Framework, partnering with Engineering, Product, Sales, Legal, HR, and other teams
Proactively improvement control design and performance to address a changing risk landscape
Deliver timely audits through working with internal and external auditors
Help customer-facing teams respond to information security requirements and questionnaires
Assist with third party risk management reviews, assessing vendor’s security, compliance, and privacy posture
Participate in team project management, including documentation, project planning, task management, and prioritization
Participate in recurring annual core audits (e.g., SOC 2, ISO, PCI)
Maintain awareness of security and regulatory trends, perform research and analysis on new certifications, and help Wiz pursue new international compliance initiatives

Cyber Manager's Control Assessment (MCA) Lead Analyst

This role will report to the Cybersecurity MCA Group Manager, responsible for pr...

Location

Hungary , Budapest

Salary:

Not provided

Citi

Expiration Date

Until further notice

Requirements

Have at least 8+ years of relevant experience
Experience in Manager’s Control Assessment (MCA), Operational Risk, Information Security, Cybersecurity, Risk Management, and/or Governance, Risk and Control (GRC)
Risk Management, Cybersecurity, and/or Project Management certifications are a plus (e.g. CRISC, CISA, CISM, CISSP, PMP)
Proven experience in implementing sustainable solutions and improving processes
Bring creative approaches to help us drive value for clients
Ability to influence decisions with senior leadership and business partners when confronted with differing opinions on information security risks
Proficiency with Microsoft Office, advanced Excel skills (e.g. macros, pivots, complex formulas)
Knowledge of data visualization/analytics business applications such as Tableau, QlikView, and Microsoft Power BI
Familiarity with Machine Learning and Artificial Intelligence (AI) is a plus
Fluent in English (ability to read, write, and speak)

Job Responsibility

Manage the planning, coordination, and execution of MCA Transformation program for CISO
Drive MCA best practices, transformation, and execution consistency across business/functions
Lead efforts in Global Process MCA Profiles (GPMPs) and Continuous Risk Management (CRM) for CISO
Gain expert-level knowledge of MCA Standard, Procedure, and tools to support future-state MCA
Support CISO Business Processes, Control Owners, and Global Assessment Unit (GAU) Owners in their responsibilities related to MCA execution
Identify and document key controls necessary for mitigation of cybersecurity risk
Be a hands-on Subject Matter Expert (SME) with the ability to drive problem solving and root cause analyses, simplify complex messages and summarize key points
Partner with CISO’s Enterprise Architecture Methodology (EAM) Lead team by which taxonomies and processes interlink with each other, establishing a multifaceted matrix to inform decision-making and simplification
Foster constructive dialogue and facilitate open discussion, sharing of knowledge and experience with customers and stakeholders
Actively manage relationships with CISO business partners and risk management teams to achieve sustained success

What we offer

Cafeteria Program
Home Office Allowance (for colleagues working in hybrid work models)
Paid Parental Leave Program (maternity and paternity leave)
Private Medical Care Program and onsite medical rooms at our offices
Pension Plan Contribution to voluntary pension fund
Group Life Insurance
Employee Assistance Program
Access to a wide variety of learning and development programs, online course libraries and upskilling platforms, such as Udemy and Degreed
Flexible work arrangements to support you in managing work - life balance
Career progression opportunities across geographies and business lines

Fulltime

Compliance Analyst

insightsoftware is seeking a detail-oriented and proactive Compliance Analyst to...

Location

United States , Remote

Salary:

Not provided

insightsoftware

Expiration Date

Until further notice

Requirements

Bachelor's degree in information security, Cybersecurity, Computer Science, Risk Management, Legal Studies, Business Administration, or related field
Minimum 3+ years of experience in compliance program management, risk management, or information security roles, preferably in regulated industries or technology companies
Demonstrated experience responding to third-party risk assessments, security audits, customer security questionnaires, RFPs, and compliance due diligence requests
Working knowledge of regulatory frameworks and standards (e.g., ISO 27001, SOC 2 (Type II), NIST, FedRAMP, CMMC, PCI DSS, GDPR, CCPA), trade control regulations (EAR, ITAR), anti-bribery/corruption laws (FCPA, UK Bribery Act), and data privacy principles
A strong knowledge of at least one regulatory framework governing matters pertaining to data privacy, cybersecurity, trade compliance, or third-party risk management
Experience with third-party screening tools and vendor risk management platforms
Familiarity with GRC or data protection management platforms (e.g., OneTrust, ServiceNowMetricStream)

Job Responsibility

Support the development, implementation, and maintenance of a global compliance program, including trade compliance, anti-bribery/corruption, anti-trust, and business ethics
Conduct secondary screening of third parties (vendors, partners, customers) , and assess potential matches against government watchlists of denied, debarred, sanctioned, or restricted parties to ensure compliance with applicable trade compliance, export control and sanctions regulations (e.g., U.S. Department of the Treasury Office of Foreign Assets Control ("OFAC"), U.S. Department of Commerce Bureau of Industry and Security ("BIS"), U.K. Office of Financial Sanctions Implementation ("OFSI"), European Union, and United Nations)
Assist with export classification determinations and licensing requirements for software products and services, including evaluation of Export Control Classification Numbers ("ECCNs")
Support the company's compliance with applicable data protection regulatory frameworks (e.g., GDPR, CCPA)
Support the Corporate Counsel, Data Privacy, AI, Cybersecurity with data protection initiatives and obligations including data mapping exercises, processing activity records, and privacy impact assessments, and coordinate responses to data subject access requests ("DSARs") and privacy-related inquiries
Support privacy management tools and platforms for consent management and privacy workflow automation
Partner with company counsel, InfoSec, and other stakeholders with compliance audits, data privacy questionnaires, and third-party risk assessment processes including vendor due diligence and ongoing monitoring
Support risk and control self-assessments ("RCSA"), audit management, and remediation tracking
Collaborate with stakeholders including the Chief Information Security Officer ("CISO") and the team to quantify, monitor, and report on security and compliance performance
Maintain GRC platforms (e.g., ServiceNow, Archer, MetricStream) to track compliance activities, risks, and controls

New

Principal Technical Program Manager - FastShift

Success in the cloud is one of Atlassian’s top strategic priorities. As a Princi...

Location

United States

Salary:

167400.00 - 262025.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

10+ years of experience designing and building enterprise-grade platforms and systems
expertise in cloud, data, ecosystem, or experience platforms
deep understanding of cloud platform architecture
deep understanding of the latest in AI/ML technologies
strong drive for product design and delivery
ability to balance strategic vision and technical execution
proven ability to influence and align leaders across multiple functions
exceptional executive presence
outstanding communication, collaboration, and leadership skills
thrive in a fast-paced, dynamic environment

Job Responsibility

Take end-to-end ownership of the most challenging technical programs, from design through launch and ongoing operations
Design scalable, production-ready solutions and set architectural standards that guide the organization
Identify and resolve blockers across the Atlassian ecosystem, ensuring a stellar cloud experience for every customer
Partner with senior leaders across Product, Engineering, Sales, and GTM to define and execute the vision for Fastshift
Maintain a customer-first mindset, ensuring the well-being of our customers and partners is at the heart of every decision
Serve as the subject matter expert on migration strategies and AI-driven productivity enhancements

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

New

Senior Machine Learning Engineer

Rovo Chat is Atlassian’s flagship product, driving the next generation of user e...

Location

United States

Salary:

168300.00 - 264375.00 USD / Year

Atlassian

Expiration Date

Until further notice

Requirements

Bachelor's or Master's degree (preferably a Computer Science degree or equivalent experience)
5+ years of related industry experience in the machine learning domain
Expertise in Python or Java with and the ability to write performant production-quality code, familiarity with SQL, knowledge of Spark and cloud data environments (e.g. AWS, Databricks)
Experience building and scaling machine learning models in business applications using large amounts of data
Ability to communicate and explain machine learning concepts to diverse audiences, craft a compelling story
Focus on business practicality and the 80/20 rule
very high bar for output quality, but recognize the business benefit of "having something now" vs "perfection sometime in the future"
Agile development mindset, appreciating the benefit of constant iteration and improvement

What we offer

health and wellbeing resources
paid volunteer days

Fulltime

Senior GRC Analyst

Blume Global

Location:
United States , Chicago

Category:
IT - Administration

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Nice to have:

Additional Information:

Job Posted:
December 27, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Senior GRC Analyst