Senior Security GRC Analyst

1 hour ago
Full-time
Senior
Cybersecurity
Rubrik

Rubrik

Rubrik provides cutting-edge data security and protection solutions, including Zero Trust Data Protection and ransomware recovery, to ensure data readiness and business resilience.

IT Services
1K-5K
Founded 2014
$553M raised

Description

  • Maintain global compliance certifications and track evolving data privacy standards.
  • Serve as the primary liaison for internal and external audits, managing timelines, evidence collection, and communications.
  • Partner with cross-functional teams to identify control gaps, prioritize remediation, and implement scalable risk-reducing solutions.
  • Systematize the collection, retention, and organization of audit evidence to keep the organization audit-ready.
  • Conduct continuous monitoring of common controls to assess control effectiveness and support security posture reporting.
  • Translate complex regulatory requirements and technical standards into clear operational requirements.
  • Provide stakeholder updates on compliance program health to leadership and internal teams.
  • Design and deliver training to help process owners understand compliance responsibilities and security requirements.
  • Support risk assessments by identifying, documenting, and tracking remediation of information security threats.
  • Support development and updates to the information security policy framework and supplier security monitoring processes.

Requirements

  • 5+ years of experience in Information Security GRC, compliance, IT, information security compliance, or auditing, preferably in the tech industry.
  • Proven track record driving security and operational risk processes within a modern risk oversight function.
  • Advanced knowledge of risk quantification principles and experience implementing FAIR-like approaches.
  • Strong understanding of security risks, vulnerabilities, and threats.
  • Expertise in frameworks and standards such as ISO 27001/2, FedRAMP, SOC 2, CIS Top 20, PCI DSS, NIST CSF, HIPAA, HI-TRUST, BSI C5, Cyber Essentials, DESC, and EU-US Privacy Shield.
  • Proficiency in audit and risk management methodologies such as SOX, COBIT, and NIST RMF.
  • Hands-on experience with data analytics and BI tools such as Power BI and project management tools such as Jira.
  • Executive presence with the ability to build consensus across diverse partners.
  • Bachelor's degree in Security, Computer Science, or a related field; Master's degree preferred.
  • Professional certifications such as CISA, CISM, CRISC, CGEIT, or CISSP preferred.
  • Experience in high-growth SaaS and data management industries is a plus.
  • Ability to manage multiple projects and deliver quality work to deadlines.
  • Excellent interpersonal, verbal, and written communication skills for technical and non-technical audiences.
  • Demonstrated success working with internal audit, external auditors, outside consultants, and outside counsel.
  • Strong technical foundation to develop compliance best practices based on Rubrik systems and processes.
  • Ability to ramp up quickly and learn new technologies with minimal lag time.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Insider Risk Analyst

SpaceX 10K-50K Aerospace & Defense

SpaceX is hiring an Insider Risk Analyst to investigate anomalous activity and protect sensitive technologies, personnel, and operations across its global programs.

SIEM Splunk
0 minutes ago

Information Security Analyst

Mindera 1K-5K Internet Software & Services

Mindera is seeking a mid-level Information Security Analyst to support security operations across its global locations, helping monitor infrastructure, manage vulnerabilities, respond to incidents, and strengthen the company’s security posture.

Agile AWS Bash CrowdStrike GCP Linux macOS Palo Alto Python
16 hours, 14 minutes ago

Security Support Analyst, Contract

66degrees 251-1K IT Services

66degrees is seeking a remote Information Security Support Helpdesk Contractor to support security helpdesk operations for a client, handling frontline identity and access requests within a 12-month contract with potential to extend or convert.

Active Directory
16 hours, 45 minutes ago

Fraud Data Analyst

Riskified 251-1K Internet Software & Services

Riskified is hiring a Fraud Data Analyst to support its Merchant Health Team in analyzing customer performance and preventing online fraud for a global client base.

Python R SQL
18 hours, 18 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers