Senior GRC Analyst, Abnormal Security

• The ideal candidate will have the mindset of an auditor with keen attention to detail, possess exceptional skills in project management, be a good communicator who excels at explaining complex technology to diverse audiences in a way that fosters understanding and ownership, has strong collaboration and business sense, and an adept awareness of our customers’ requirements of Abnormal as a leading cybersecurity SaaS provider
• Proven security experience in an audit or advisory capacity
• Analytical thinker who exercises good business judgment
• Confidence and willingness to ask questions, raise issues, and concerns in a timely manner
• High attention to detail, process, and organization with strong project management skills to ensure accountability and results
• Strong communication skills with the ability to quickly build rapport with internal and external stakeholders including auditors; demonstrated experience presenting technical concepts to diverse audiences
• Proficient in managing results and achievements, even when faced with ambiguity or competing approaches regarding the best path to success
• Ability to adapt to change, including evolving business and technical environments, and manage multiple priorities while meeting deadlines in a fast-paced environment
• Team player, collaborative work style
• Self-motivated and able to work efficiently with minimal oversight/direction
• 5+ years of experience in IT audit, SOx compliance, or related GRC roles
• In-depth knowledge of SOX 404 requirements and IT General Controls (ITGCs)
• Experience coordinating internal or external audits, including evidence gathering and walkthroughs
• Strong project management skills and ability to drive remediation across teams
• Excellent written and verbal communication skills, with the ability to explain audit findings and compliance needs to non-technical stakeholders

Desirable

• Abnormal AI is looking for a Senior GRC Analyst (Governance, Risk, and Compliance) to lead our SOx IT compliance program
• The Security & Privacy team owns the information and cybersecurity program for the company, including IT, Security Operations, GRC, Privacy, and Customer Trust
• This role will be responsible for managing the end-to-end SOx program in coordination with internal and external audit partners, Finance, and IT
• This includes leading ITGC scoping, evidence collection, walkthroughs, testing, and issue remediation
• This person will serve as the main point of contact for SOx-related matters and will help mature the program in alignment with our rapid growth and evolving risk landscape
• Own and lead Abnormal’s SOx IT compliance program, including annual planning, testing coordination, and reporting
• Coordinate with internal and external auditors to manage walkthroughs, evidence collection, and testing of ITGCs
• Track and drive remediation of control gaps or audit findings and ensure closure is properly documented
• Maintain up-to-date documentation for controls, narratives, and process flows
• Partner with business and technical stakeholders to improve control design and operational effectiveness
• Monitor regulatory changes and adjust control requirements and documentation as needed
• Support continuous improvement of the SOx program, through automation, metrics, and process enhancements
• Design and manage program operations to support the program goals and implement and maintain technology to support the program and its operations
• Engage in ad-hoc projects as required
• Maintain regular, clear communication with project teams, key partners, and management regarding the status of controls testing, audit progress, risk assessment progress, and progress of issues management
• Effectively communicate program and project execution status, program health and effectiveness, key accomplishments, and risks to senior management both within Security and to our business partners

• As part of Abnormal AI's secure hiring practices, we conduct video interviews and validate applicant identity at various stages through our recruitment process
• Further, if your application is successful and Abnormal AI makes a conditional offer of employment, we will carry out pre-employment checks which must be successfully completed to progress to a final offer