Senior Security Risk Analyst, GRC

Role overview Help operate and improve a global security risk program so teams can make practical, evidence-based decisions as the business grows. The work combines risk assessments, control analysis, exception handling, reporting, and process automation, with a focus on translating security and regulatory requirements into actions that owners can carry out.

Responsibilities - Assess risks and work with control owners on treatment plans and accountability. - Translate changes in regulations and risk frameworks into operational controls. - Examine how controls work in practice and use threat intelligence to identify emerging exposure. - Manage policy exceptions by developing compensating controls or documenting a risk acceptance case. - Own risk metrics and reporting for an assigned business area, tracking measurable risk reduction. - Improve risk processes and tooling through workflow automation, and collaborate across security, GRC, and business teams.

Requirements - Four or more years of experience in security risk, governance, risk and compliance, or a related area. - Technology-related bachelor’s degree or four additional years of relevant technology work experience. - Working knowledge of risk frameworks, including the NIST Cybersecurity Framework. - Ability to explain technical risks and control requirements clearly to both technical and non-technical audiences. - Strong written and verbal communication, risk reporting, and metrics skills. - Experience automating workflows or interest in agentic AI workflows.

Nice to have - Experience with GRC platforms, AI-related risk, or control assurance and effectiveness testing.

Benefits and work setup - Compensation includes potential equity grants; base pay is localized by work location. - Benefits include retirement plan matching, paid parental leave, wellness and commuter support, paid time off and holidays, health and dental coverage, disability and life insurance, family-forming assistance, and mental health resources.