Senior GRC Analyst, Shift Technology
$120-150k
More information about location
AI-driven insurance fraud solution
Be an early applicant
AI-driven insurance fraud solution
501-1000 employees
Be an early applicant
$120-150k
More information about location
501-1000 employees
Company mission
To revolutionise the policyholder experience through wide-ranging products that apply AI and advanced data science to key insurance processes.
Role
Who you are
- 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role
- Bachelor’s Degree in a relevant field or equivalent work experience
- Professional certifications such as CIPP/E, CIPP/US, CIPT CISA, CISM, CRISC, or CISSP are highly desirable
- Direct experience of delivery in highly regulated industries, i.e financial services, healthcare
- Direct experience managing or supporting formal audit and certification processes from start to finish
- Deep knowledge of security and privacy frameworks is required (e.g., ISO 27001, ISO27701, SOC 2 Type II, HITRUST, NIST CSF)
- Strong knowledge of global privacy and healthcare regulations (e.g., GDPR, HIPAA)
- Working knowledge of AI regulations, frameworks, and standards (e.g., EU AI Act, ISO 42001)
- Working knowledge of business continuity, disaster recovery, and incident response planning, including plan structure, exercise and test methodologies
- Hands-on experience with modern GRC management tools, preferably Drata - connecting integrations, tuning automated evidence collection and monitoring tests, and building custom controls and frameworks
- Exceptional communication and presentation skills, with the ability to translate complex compliance requirements into clear business guidance
- Strong stakeholder management skills with the ability to influence and align teams without direct authority
- Highly organized with strong project management skills, capable of managing multiple audits and assessments simultaneously
- An analytical mindset with the ability to balance regulatory requirements with business objectives and priorities
What the job involves
- As a Senior GRC Analyst, you will be a cornerstone of Shift’s security program, responsible for developing, maintaining, and assessing our integrated security and privacy management framework
- You will manage our compliance with key industry standards, lead risk assessments, oversee our third-party security assurance program, and support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence
- This role is critical for ensuring that Shift meets its regulatory obligations and maintains the trust of our customers
- As part of the Information Security department, this role reports to the GRC Lead
- Governance & Policy Management:
- Act as a lead contact to translate Shift’s global information security expectations into actionable policies, standards, and procedures
- Promote a mind-set of security and compliance across the organization, transferring knowledge of standards and acting as a subject matter expert (SME)
- Contribute to the development and support of the security awareness program to ensure it aligns with policy and compliance requirements
- Partner with the Data Protection Officer to develop and maintain privacy policies, data handling standards, and public-facing privacy notices in line with privacy laws and global regulations such as GDPR
- Risk Management & Security Assurance:
- Develop and maintain the security assurance plan, ensuring key controls are effectively designed and implemented to meet Shift policies and standards
- Improve the third-party information security assurance and continuous assessment process
- Identify key risk areas in collaboration with engineering and business teams and facilitate security control evaluations and testing
- Review architectural designs and new initiatives to ensure they align with security policies and effectively mitigate risk
- Proactively identify potential information security GRC problem areas and execute plans to improve the overall assurance workflow
- Support and facilitate Data Protection Impact Assessments (DPIAs) for new products and initiatives
- Compliance & Audits:
- Manage and coordinate internal and external audits for certifications such as ISO 27001 and SOC 2 Type II
- Perform analysis and compile documentation and evidence to demonstrate the compliance level of systems, services, and controls
- Work with internal teams to manage the remediation of audit findings and track them to closure
- Support legal and stakeholder teams in responding to Data Subject Access Requests (DSARs)
- Third-Party Risk Management:
- Develop, execute, and improve the third-party information security assurance and continuous assessment process
- Communicate with third parties and suppliers to conduct risk assessments, review their security posture, and manage the remediation of identified issues
Application process
- First fit call with our Talent Acquisition Manager
- Team fit call with the Hiring Manager
- Tech round with the Team
- A final interview with our CISO
Our take
The global insurtech market is projected to grow substantially given the increased demand for insurance service digitisation, projected market expansion, and developments in technology that have made it easier to buy and process claims. Insurtech helps create new avenues that large insurance companies have less incentive to pursue, such as offering social insurance and customised policies for clients.
In January 2021, Shift Technology introduced the Shift Insurance Suite to help the insurance industry apply AI-based decision automation and optimisation technology solutions. This addresses critical processes across the insurance policy lifecycle, and helps insurers to achieve faster, more accurate claims and policy resolutions.
Shift Technology is focusing on continuous deployment in the UK and the US, whilst exploring opportunities in Singapore, as it attempts to become an international player in the market. However, it must stave off a number of major competitors to do so, including Quantemplate, Slice and Neos.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-1% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
May 2021
$220m
SERIES D
Mar 2019
$60.3m
SERIES C
Total funding: $320.2m
Company benefits
- Flexible remote and hybrid working options
- Competitive Salary and a variable component tied to personal and company performance
- Company equity
- Generous PTO and paid holidays
- Parental leave opportunities
- Extensive mental health benefits provided via our global Employee Assistance Program
- Paid volunteering time - 16 hours annually
Company HQ
Bercy, Paris, France
Leadership
Jeremy Jawish
(Co-Founder & CEO)Experience in fraud detection solution development for AXA in 2011, and as an FICC Strategist for Goldman Sachs in 2012.
Eric Sibony
(Co-Founder & CSO)PhD in machine learning from 2012-2016, and has been CSO since 2013.
David Durrleman
(Co-Founder & Fellow Engineer)Experience as a Fixed Income Strategist for Goldman Sachs between 2008-2013.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at Shift Technology