Senior GRC Analyst, Pax8
$100-125k
+ Non-Commissioned Bonus Plans or Variable Commission + Stock Option
Marketplace for cloud-based business solutions
Be an early applicant
Marketplace for cloud-based business solutions
1001+ employees
Be an early applicant
$100-125k
+ Non-Commissioned Bonus Plans or Variable Commission + Stock Option
1001+ employees
Company mission
To be the world’s favourite marketplace for technology professionals to buy cloud products.
Role
Who you are
- The ideal candidate has a strong understanding of cloud-native technologies, SaaS delivery models, and regulatory frameworks such as SOC 2, ISO 27001, and GDPR
- This role requires a mix of analytical rigor, technical acumen, and business judgment to help scale and mature our risk and compliance functions in a dynamic, fast-paced environment
- 3-5 years in a technology GRC role
- Technical background with a focus on SaaS and multi-tenant cloud platforms highly preferred
- Proven experience in running assessments and/or audits with demonstratable track record of driving improvements
- Compassionate Candor—We aim to assist others with candid, actionable feedback
- Seek to Understand—Be open, curious and committed to learning
- We Before Me—Actively collaborate and seek out diverse perspectives to ensure a win for Team Pax8
- Do What You Say—Take ownership and honor your commitments; prioritize and deliver
- Light Up Learning—Be brave and try new ideas; be vulnerable and share your failures so everyone can learn from our mistakes
- Driven by Passion—Connects personal passion to Pax8 mission, resilient in face of adversity and uncertainty in pursuit of mission
- B.A./B.S. in a related field or equivalent work experience
What the job involves
- We are seeking a detail-oriented and proactive Senior Technology Governance, Risk, and Compliance (GRC) Analyst to join our growing organization
- In this role, you will play a critical part in safeguarding our cloud-based platforms by identifying and managing technology risks, supporting compliance initiatives, and ensuring the effectiveness of security controls
- You will collaborate cross-functionally with teams across engineering, security, technology services, legal, and customer success to maintain our compliance posture, support audits, and drive continuous improvement in our GRC program
- Conduct regular IT risk assessments to identify and mitigate technology and cybersecurity risks in a SaaS environment
- Perform control assessments to ensure alignment with internal policies, regulatory requirements, and industry standards (e.g., ISO 27001, NIST, SOC 2)
- Maintain and update the GRC framework, ensuring it supports strategic business objectives and regulatory compliance for a cloud-native environment and DevSecOps practices
- Coordinate and support internal and external IT audits, including evidence collection, walkthroughs, and remediation tracking
- Facilitate and monitor the completion of risk treatment plans, working with business units to implement mitigation strategies
- Lead or support the incident response process, including documentation, root cause analysis, and post-incident reviews. Includes on-call Incident Commander rotation (approximately 1 out of 6 weeks)
- Maintain the risk register, ensuring accurate and up-to-date records of all identified risks and mitigation actions
- Develop and deliver GRC training and awareness programs for staff, promoting a culture of risk-conscious behavior
- Track and report compliance metrics, risk trends, and audit findings to key stakeholders and leadership
- Collaborate with IT, security, legal, and business teams to assess and manage third-party/vendor risks
- Ensure timely updates and maintenance of policies, standards, and procedures related to IT risk and compliance
- Monitor and interpret emerging regulations and industry best practices, recommending changes to the GRC program as needed
- Participate in the development of business continuity and disaster recovery plans, ensuring alignment with risk management objectives
- Utilize GRC tools and platforms to streamline risk, compliance, and audit processes
- Provide ongoing support for special projects and initiatives related to cybersecurity, data privacy, and regulatory compliance
Application process
- Expected Closing Date: 6/30/2025
Our take
Cloud computing facilitates access to software products without having the computer power required to use them, presenting great opportunities for enterprises to benefit from cutting-edge software. However, managing subscriptions to cloud products can be a convoluted process unique to each software product, presenting the need for a unified accessibility solution.
Pax8 provides an online marketplace for cloud-based software, allowing businesses to order, bill, manage, and provision cloud products within a single place. The marketplace contains a curated catalogue of cloud providers, a license management dashboard, demo infrastructure and tools for billing and invoicing, ultimately ensuring that users do not need to navigate outside the platform to manage their cloud software inventory.
Whilst many of the services provided by Pax8 are already included in cloud software applications, the company has made the smart move of partnering with software providers such as Bam Boom Cloud to unify all management tools into a single platform. By ensuring companies can browse, purchase, and manage cloud solutions within the marketplace, the company aims to increase accessibility and minimise complexities associated with cloud computing.
Steph
Company Specialist at Welcome to the Jungle
Insights
33% employee growth in 12 months
Company
Funding (last 2 of 4 rounds)
Apr 2022
$185m
LATE VC
Jan 2021
$96m
LATE VC
Total funding: $336m
Company benefits
- Non-Commissioned Bonus Plans or Variable Commission
- 401(k) plan with employer match
- Medical, Dental & Vision Insurance
- Employee Assistance Program
- Employer Paid Short & Long Term Disability, Life and AD&D Insurance
- Flexible, Open Vacation
- Paid Sick Time Off
- Extended Leave for Life events
- RTD Eco Pass (For local Colorado Employees)
- Career Development Programs
- Stock Option Eligibility
- Employee-led Resource Groups
Company HQ
Bristol, UK
Leadership
John Street
(CEO)Experience as CEO, Chairman and Founder of MX Logic from 2002 to 2009. CEO and Chairman of MSBiotec from 2009 to 2018.
Share this job
View 17 more jobs at Pax8