Senior GRC Security Analyst, Anaplan

• 5+ years of professional experience in Security Governance, Risk, and Compliance
• Strong understanding of risk management concepts, frameworks, and standards (ISO, NIST, SOC, SOX, etc.)
• Proven ability to collaborate with technical stakeholders to identify risks, map commitments to controls, and develop policies
• Skilled at assessing policy alignment and developing remediation plans when gaps exist
• Experience working in complex, modern technology environments
• Deep knowledge of risk assessment, compliance frameworks, and policy creation, with the ability to educate organizations on these concepts
• Knowledge of third-party risk management and vendor security assessment processes
• Direct experience working with prospects and customers

Desirable

• Develop, maintain, and enhance cybersecurity policies, standards, and control frameworks to align with industry regulations (ISO, SOC, SOX, DORA, NIST)
• Partner with cross-functional teams to embed cybersecurity policies into business processes
• Maintain a centralized inventory of cybersecurity controls aligned with regulatory and internal security requirements
• Conduct cybersecurity risk assessments to identify, evaluate, and prioritize security risks across the organization
• Monitor and track risk remediation efforts, providing guidance on effective mitigation strategies
• Support internal and external audits (ISO, SOC, SOX, etc.) with documentation, evidence, and coordination
• Track and manage cybersecurity exceptions, risk acceptance, and remediation activities
• Provide risk management, policy, and compliance guidance to business units, Sales, and Legal during reviews, RFPs, and customer assurance activities