Security GRC Analyst

*Note: This position requires presence New York City.

The Security GRC Analyst is responsible for the facilitation, operation, and maintenance of Governance, Risk & Compliance efforts to support our Information Security and Compliance goals and objectives. The role will be heavily focused on remediating information security controls, supporting audits for the company certification programs and will report directly to the Head of Compliance, Elaine Tan. 

This position interacts with all levels of the business, and calls for adaptability, advocating for flexible strategies, and a thorough grasp of compliance requirements and our operations. Success in this position depends on the ability to drive new compliance initiatives across various departments while maintaining professionalism and composure under pressure. 

Here, you will not only witness the direct impact of your efforts but also shape the future of compliance and governance in a dynamic, fast-evolving industry.

What You’ll Do

•  Responsible for Third Party Risk Management Program including onboarding and renewals
• Implement and maintain Security GRC projects dashboard reporting
• Lead Internal Audit Program
• Assist with remediation of control deficiencies and gaps identified internally and externally for SOC 2 TYPE II
• Assist Control Owners in the maintenance & remediation of control activities for Internal Audit 

You

• Have 2-4 years experience in running audits, certification programs and control assessments, including but not limited to: scope planning, defining control procedures based on requirements, policies and standards, control testing, mapping issues to risks
• Possess strong knowledge of and experience in security risk management frameworks including related regulatory compliance requirements (e.g., SOC 2, SOX)
• Have a strong ability to define, drive and execute a program vision, strategy, approach and milestones in alignment with organization priorities and initiatives
• Are able to advocate for flexible strategies that still meet compliance requirements and operations needs
• You consistently maintain professionalism and composure under pressure

Nice to Have 

• Experience in the machine learning or computer hardware industry

Salary Range Information 

Based on market data and other factors, the salary range for this position is $110,000 -$145,000. However, a salary higher or lower than this range may be appropriate for a candidate whose qualifications differ meaningfully from those listed in the job description.