Senior / Principal GRC Analyst

About the role

The Senior / Principal GRC Analyst is a senior individual contributor responsible for architecting, leading, and scaling enterprise governance, risk, and compliance programs across highly regulated, technology‑driven environments.

What you'll do

• Define and maintain a risk‑based GRC architecture aligned to ISO, NIST, privacy, and regulatory requirements
• Lead end‑to‑end implementations of: ISO/IEC 27001 (ISMS ownership, risk methodology, SoA, internal audits)
• Translate security architectures and technical controls into compliant policies, standards, and evidence
• Lead enterprise, third‑party, cloud, and AI‑specific risk assessments
• Serve as primary interface for auditors, assessors, regulators, customers, and partners

What you need

• 7–12 yrs of experience
• ISO 27001
• CISSP
• CISA
• Compliance
• Data privacy
• CI/CD
• Any graduate

Good to have

• IAM
• Cloud security
• EDR
• Firewalls
• Internal audit
• AWS