Senior Staff Analyst, GRC

1 day, 20 hours ago
Full-time
Lead
Cybersecurity
Mozilla

Mozilla

Mozilla, the maker of Firefox, is a non-profit organization ensuring an open, safe, and accessible internet for all users worldwide.

Internet Software & Services
251-1K
Founded 2005
$2M raised

Description

  • Develop and maintain a comprehensive GRC strategy and roadmap aligned with business objectives.
  • Lead the creation and enforcement of standards, policies, controls, audits, and reporting across enterprise and product areas.
  • Develop and operationalize a periodic risk assessment and management framework to prioritize and remediate critical issues.
  • Define and deliver measurable scorecards and metrics to support data-driven decision making.
  • Ensure compliance with regulatory standards and frameworks including ISO, NIST, SOC2, CCPA, and GDPR.
  • Lead internal and external audit activities, including tracking and resolving deficiencies and remediation actions.
  • Partner closely with Legal, IT, Finance, and Security to align on the GRC program and integrated risk management framework.
  • Define requirements and reporting for data lifecycle management across enterprise and product domains.
  • Work with data platform and legal teams on data lifecycle management requirements and scorecards.

Requirements

  • 10+ years of progressive experience developing and delivering an integrated GRC framework.
  • Deep knowledge of regulatory frameworks, processes, and tools used to build a robust GRC program.
  • Experience leading cross-functional requirements for product and enterprise teams to implement compliance controls and measures.
  • Relevant industry certifications such as CISA, CISSP, CISM, or CRISC.
  • Hands-on experience with security and analytics tools such as SIEM and BI tools.
  • Ability to develop root cause analyses and remediation plans to resolve risk deficiencies.
  • Strong critical thinking skills with the ability to drive long-term organizational impact.
  • A demonstrated bias for action and the ability to navigate constraints to achieve business outcomes.
  • Ability to collaborate with and influence diverse stakeholders to drive change and address cross-functional challenges.

Benefits

  • €88,000 to €117,000 EUR remote Germany hiring range.
  • Generous performance-based bonus plans for eligible employees.
  • Rich medical, dental, and vision coverage.
  • Generous retirement contributions with 100% immediate vesting.
  • Quarterly all-company wellness days.
  • Country-specific holidays plus a day off for your birthday.
  • One-time home office stipend and an annual professional development budget.
  • Quarterly well-being stipend and considerable paid parental leave.
  • Employee referral bonus program.
  • Additional benefits such as life/AD&D, disability, and employee assistance support, varying by country.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Regulatory Policy, Senior Associate

Coinbase 1K-5K Capital Markets

Coinbase is hiring a Regulatory Policy Senior Associate to support regulatory advocacy and policy development for its crypto and blockchain business in a fast-paced, remote-first-but-not-remote-only environment.

Blockchain Generative AI Machine Learning
1 day, 7 hours ago

Payroll Risk & Compliance Principal - Nordics

Remote 251-1K Professional Services

Remote is hiring a Nordics Risk & Compliance Expert to own payroll compliance across Norway, Sweden, Denmark, and Finland, with formal statutory responsibility in Norway and a focus on embedding regional compliance into its global payroll platform.

1 day, 7 hours ago

Data Protection Officer

Moniepoint 1K-5K Diversified Financial Services

Moniepoint is seeking a Data Privacy & Protection Officer to support its Compliance Team in managing privacy governance, regulatory compliance, and data subject rights across its financial operations in line with Nigerian and international data protection rules.

Cybersecurity Encryption
1 day, 7 hours ago

VP, Regulatory Affairs, Strategy, Labeling and Operations

bridgebiowp 251-1K Pharmaceuticals

BridgeBio is seeking a Vice President of Regulatory Affairs to lead regulatory operations, business operations, and labeling while supporting regulatory strategy for global development and commercial products.

1 day, 7 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers