Senior Cybersecurity GRC Analyst

About the role

We are looking for a Senior Cybersecurity Governance, Risk and Compliance (GRC) Analyst to join our remote information security team. The role will drive GRC maturity, support privacy operations and lead annual PCI compliance activities.

Key responsibilities

• Support GRC and Privacy Operations with day‑to‑day program activities and strategic initiatives.
• Prepare, coordinate and support annual PCI compliance audits.
• Maintain and enhance the organization’s common control framework.
• Monitor compliance through control testing, assessments and reviews.
• Document findings, identify gaps, communicate risks and track remediation.
• Develop and maintain information security risk registers and support enterprise risk reporting.
• Conduct third‑party security and compliance assessments and provide risk‑based recommendations.
• Build metrics, dashboards and reports on compliance performance and risk trends.
• Improve GRC and privacy processes through documentation, automation and optimization.
• Support AI governance, privacy and security review activities.
• Partner with business and technical stakeholders to align security, privacy and compliance requirements.
• Monitor changes in laws, regulations, industry standards and emerging cyber risks.

Required profile

• 6+ years of progressive experience in GRC, information security risk management, audit, compliance or privacy.
• 4+ years of experience supporting PCI compliance programs, assessments and audits.
• 2+ years of experience in privacy programs or operations.
• Proven track record of building or maturing GRC programs and frameworks.
• Strong written and verbal communication skills and ability to work in ambiguous environments.

Required skills

• PCI DSS compliance
• NIST framework
• ISO 27001
• SOC 2
• AI governance and security review
• Third‑party security assessment
• Risk register management