Senior GRC Analyst, Punchh
$90-110k
More information about location
Loyalty and engagement platform for brands
Job no longer available
Loyalty and engagement platform for brands
201-500 employees
Job no longer available
$90-110k
More information about location
201-500 employees
Company mission
To enable their customers to quickly scale, own their path to innovation, and take back the relationship with their own customers.
Role
Who you are
- 5-7 years of hands-on GRC or technology experience in one or more domains, such as cybersecurity, data privacy, IT audit, or compliance
- Significant experience working with audit principles, methodologies, and standards
- Experience working independently, prioritizing tasks, and managing multiple initiatives simultaneously
- Thorough knowledge of common regulations, laws, and control frameworks, such as SOX ITGCs, GDPR, CCPA, SOC II, PCI, CIS, ISO27001, etc
- Bachelor’s degree in a business or technology-related major and a current industry certification, such as CISSP, CIPP, CCSP, CISM, etc
- Ability to build collaborative relationships with diverse stakeholders across the whole company
- Effective communicator who can coordinate, escalate, provide feedback, and ask for help
- Capable of efficiently supporting the GRC team's workflow
- Continuous learner, innovator, and collaborator who thrives on helping people achieve more than they thought possible – together, we win as a team!
- Experience working in a (SaaS) technology company
- Working knowledge of Agile Scrum, SDLC, Dev Ops
- M&A experience
- Successfully working in a remote-first environment
What the job involves
- PAR is looking for a Senior Governance, Risk, & Compliance (“GRC”) Analyst, reporting to the Senior Director, GRC
- PAR is an international, fast-paced, high-growth environment and our tech stack is cloud and SaaS first, with a limited on-prem footprint
- Our ideal candidate will embrace diverse perspectives and exhibit integrity, leadership, security domain expertise, strong technical acumen, sound business judgement, creativity, entrepreneurial spirit, and exceptional communication skills, all while keeping security and business objectives front and center
- Reports To: Associate General Counsel, Privacy
- The Senior GRC Analyst and the GRC team are primarily responsible for GRC capabilities, including unified cybersecurity, data privacy & trust framework oversight, third-party risk management, customer assessment & inquiry response, trust center development & maintenance, and related inquiry resolution
- While being a key resource for the entire company, the Senior GRC Analyst should be a subject matter expert who partners closely with IT, Legal, Internal Audit, and the Product & Technology teams in delivering against the company’s overall cybersecurity, privacy & trust program
- Support the GRC team vision and strategy aligned with PAR's business objectives, and oversee the implementation and management of the cybersecurity, privacy & trust program aligned with industry best practices and compliance requirements
- In partnership with the IT, Legal, Internal Audit, and the Product & Technology team, prioritize the most valuable outcomes for the business aligned with the applicable risk-based control frameworks (e.g., CIS, SOC, PCI, CCPA/GDPR)
- Serve as a leader and mentor on the GRC team to be business focused, deeply technical, highly motivated, and productive, fostering a culture of continuous improvement and professional development
- Assist in the governance of GRC operations to ensure the Company meets all required compliance standards and regulations through governing policies, implementing the appropriate control framework(s), conducting applicable risk and control assessments, and staying up-to-date on applicable compliance requirements, work with stakeholders to develop action plans, remediation strategies, and corrective actions to address identified issues while tracking and managing audit findings, deficiencies, and remediation activities to ensure timely resolution and closure, escalating as needed Assess and deploy GRC tools in furtherance of the GRC program
- Objectively communicate progress toward defined goals and outcomes by assisting in the development of appropriate KPIs/KRIs and related reports appropriate for senior leadership and the board of directors
Our take
Punchh is a provider of digital customer engagement and loyalty solutions for brick-and-mortar restaurants. The company’s AI-powered platform unifies customer data, offering restaurant marketing professionals a more informed way to launch campaigns and make the right offers at the right time.
Punchh's platform integrates with a number of systems and services, including POS and payment providers, allowing clients to implement it easily into their existing systems. The company has also partnered with agencies and system integrators towards enabling the brick-and-mortar establishments it serves to create omnichannel digital experiences that cater to the modern consumer.
Punchh has a number of high value customers including Papa John’s, TGI Fridays, and Pollo, as well as having a strong international presence. The company continues to make strategic partnerships to bolster both the utility and compatibility of its products with the often disparate systems employed in the industry.
Kirsty
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 6 rounds)
Nov 2019
$40m
SERIES C
Apr 2018
$20m
SERIES B
Total funding: $101m
Company benefits
- Medical coverage, plus dental and vision
- Training, support, and personal development
- Unlimited paid time off for max balance
- Flexible work to match your life
Company HQ
Hayward Park, San Mateo, CA
Leadership
Sastry Penumarthy
(VP & CSO)They started their career with 3 years at Siebel Systems before joining BEA Systems from 2003 to 2007 in Product & Solutions Marketing. They co-founded Nuevora in 2007 before starting Punchh in 2010.
Share this job