GRC Security Analyst

5 days, 11 hours ago
Full-time
Senior
Cybersecurity
ClearCapital.com,

ClearCapital.com,

Clear Capital is a real estate valuation technology company that provides valuation services, data and analytics tools, and a full suite of appraisal services. They offer intelligent valuation solutions for properties nationwide, serving the mortgage a...

Real Estate
1-10

Description

  • Monitor and enforce compliance with security frameworks including NIST CSF, NIST RMF, ISO 27001/27002, SOC 2, and ISO 42001, as well as GLBA, CCPA, and GDPR.
  • Conduct risk assessments to identify vulnerabilities, evaluate control effectiveness, and resolve complex compliance issues.
  • Develop, maintain, and update security policies, procedures, and guidelines to meet regulatory, contractual, and industry requirements.
  • Lead preparation for and participation in internal and external security audits, including defining audit scope and addressing findings.
  • Partner with cross-functional teams to develop and implement remediation plans for security gaps.
  • Assess third-party vendor security posture and compliance with contractual security requirements.
  • Maintain compliance records and prepare reports for management, clients, and regulatory authorities.
  • Define and track qualitative and quantitative security program metrics for business and security leadership.
  • Stay current on emerging threats, technologies, and regulatory changes affecting financial services and real estate technology.

Requirements

  • 5+ years of experience in GRC, security compliance, or risk management with a bachelor’s degree; 3+ years with a master’s degree; or equivalent experience.
  • Knowledge of security frameworks and standards including NIST CSF, SOC 2, ISO 27001, and ISO 42001.
  • Knowledge of privacy regulations including GLBA, GDPR, and CCPA.
  • Relevant certification such as CISSP, CISM, CISA, CRISC, AIGP, or equivalent.
  • Ability to independently analyze unusual and complex security issues and develop effective solutions.
  • Strong communication and stakeholder-management skills, including the ability to advise senior audiences on compliance matters.
  • Familiarity with GRC platforms such as Vanta, Drata, and OneTrust, plus risk assessment tools.
  • Working knowledge of cloud computing, DevOps, application security, and associated technology risks.
  • Advanced spreadsheet proficiency for data analysis, audit metric tracking, and compliance reporting.
  • Experience supporting data integrity and confidentiality in financial services or appraisal management environments.

Benefits

  • Base salary of $114,000-$139,000 annually, based on location, experience, and qualifications.
  • Company profit-sharing bonus program, communication stipend, and referral bonuses.
  • Medical, dental, and company-paid vision insurance.
  • 401(k) retirement plan with employer match and company contributions to health savings funds for eligible high-deductible health plan participants.
  • Paid time off, paid holidays, company-paid short-term disability coverage, and voluntary life, AD&D, accident, critical illness, and legal insurance.
  • Employee assistance and wellness programs, including virtual primary care through Galileo and virtual mental health resources through Rula.
  • Career and skill development resources.
  • Anniversary recognition program for employee tenure and milestones.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Risk Control Analyst, ATO & Risk Strategy

Binance 5001+ Capital Markets

Binance is hiring a Risk Control Analyst to lead end-to-end account takeover risk strategy and strengthen controls across account access and transaction journeys.

SQL
8 hours, 56 minutes ago

Analista de Segurança Cibernética Sênior

Flash 501-1000 Professional Services

A Flash busca uma pessoa para atuar em Application Security, fortalecendo o desenvolvimento seguro, DevSecOps e a segurança de soluções com IA em sua plataforma de RH e finanças.

AWS Burp Suite CI/CD Cybersecurity DevSecOps Docker GCP Git GitHub Actions Jenkins Kubernetes Microservices Penetration Testing REST API SonarQube
2 days, 11 hours ago

Senior SQL Fraud Analyst Full-time | 21296

Wing Assistant 51-200 Professional Services

Wing is hiring a full-time Senior SQL Fraud Analyst to remotely investigate and prevent fraudulent activity across Mode Mobile’s apps and partner networks.

Google Analytics Mixpanel Python SQL
6 days, 11 hours ago

Incident Response Analyst

Agile Defense is seeking a remote Incident Response Analyst to investigate and resolve cybersecurity incidents, strengthen defenses, and support critical government missions.

Cybersecurity GitHub Splunk
6 days, 11 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers