Senior Security GRC Analyst: AI-Driven Risk & Compliance

Yahoo

Uz

Sur place

EUR 70 000 - 100 000

Plein temps

14 jours+

Générateur de candidature

N’envoyez pas un CV générique — générez un CV et une lettre de motivation adaptés à ce poste précis.

Passez les filtres ATS

Résumé du poste

Yahoo's Paranoids team is seeking a Senior Security GRC Analyst to guide risk management, policy, and governance across Yahoo properties, coordinating with business leaders, engineers, and security teams.

You will evaluate risks, manage risk exceptions lifecycle, draft policies, and socialize standards, while leveraging AI tools to streamline reviews and ensure compliance with GDPR, SOC 2, and PCI DSS.

Qualifications

5+ years of experience in security governance, risk management, compliance, or a related information security discipline.
Experience conducting comprehensive security risk assessments and communicating findings to leadership.
Strong written and verbal communication, executive memo drafting, and cross-functional collaboration.
Knowledge of security frameworks (NIST CSF, ISO 27001, FAIR) and cloud/web infra.
Experience developing or managing security policies and governance programs.
Experience using generative AI tools to accelerate productivity.
Understanding of GDPR, SOC 2, PCI DSS.
Proven track record of continuous process improvement.

Responsabilités

Evaluate and document known security risks for executive review with actionable options.
Manage end-to-end lifecycle of risk exceptions across Yahoo properties.
Conduct risk assessments against policies, frameworks, and architectures.
Draft, revise, and maintain security policies and standards.
Socialize standards with stakeholders and align cross-functionally.
Act as liaison translating security concepts for non-technical stakeholders.
Identify and implement AI-assisted workflows to automate GRC tasks.