Security GRC Analyst

Role overview

Responsibilities

• Coordinate timely risk reviews, approvals, and escalations.
• Manage intake, triage, and tracking of security issues and exceptions.
• Review submissions, follow up on missing information, track remediation commitments and exception expiration dates, and support resolution.
• Maintain accurate case records, documentation, and statuses in case management platforms.
• Partner with security, engineering, and compliance teams to gather information, clarify requirements, and resolve blockers.
• Monitor progress, identify stalled cases or decision gaps, and coordinate follow-ups through governance workflows.
• Track case volumes, aging, remediation progress, exception renewals, and other operational metrics.
• Identify process improvements and automation opportunities; support ad hoc operational initiatives.

Candidate requirements

• At least 2 years of experience in information security, security operations, or a related field.
• Foundational understanding of security findings, risk remediation, policy exceptions, and risk acceptance.
• Technical ability to assess compensating controls and exposures.
• Highly organized and detail-oriented, able to manage cases, deadlines, follow-ups, and accurate records.
• Strong analytical and problem-solving skills; able to identify inconsistencies and issues requiring escalation.
• Strong written and verbal communication and cross-functional collaboration skills.
• Comfort learning workflow or ticketing systems and using spreadsheets and data.
• Adaptable, proactive, and interested in continuous improvement and scalable risk practices.

Modern tooling

• Direct experience using and critically reviewing code and artifacts generated by LLM coding assistants and agentic tools is required.
• Candidates must be able to guide AI tools toward desired outcomes.
• Experience experimenting with Gemini, Cursor, or other agent-based frameworks is advantageous.

Team approach