Senior GRC & Security Assurance Lead

Sponsor Finder; Boston; Hybrid; GBP 91,000 - 114,000; Full time

Benefits offered by this job

Flexible remote work

Competitive salary

Learning & development

PTO & holidays

Mental health benefits

MAD Days

Job summary

Shift Technology seeks a Senior GRC Analyst to strengthen its security program within the Information Security department. You will manage compliance with major standards, lead risk assessments, oversee third-party security assurance, and support TrustOps for customer inquiries and due diligence.

You will report to the GRC Lead and collaborate across global teams to translate regulatory requirements into practical controls, policies, and governance programs that protect customers and data.

Qualifications

• 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role.
• Bachelor’s Degree in a relevant field or equivalent work experience.
• Professional certifications such as CIPP/E, CIPP/US, CIPT CISA, CISM, CRISC, or CISSP are highly desirable.
• Direct experience delivering audit and certification processes in regulated industries (e.g., financial services, healthcare).
• Knowledge of security and privacy frameworks: ISO 27001, SOC 2 Type II, HIPAA, GDPR.

Responsibilities

• Governance & Policy Management: translate global information security expectations into policies and procedures.
• Risk Management & Security Assurance: maintain security assurance plan and conduct third-party assessments.
• Compliance & Audits: coordinate audits for ISO 27001, SOC 2 Type II, and other standards; document evidence.
• Third-Party Risk Management: conduct risk assessments with suppliers and remediation tracking.

Skills

GRC experience

IT Audit

Security Assurance

Information Security

Education

Bachelor’s Degree

Tools

Drata

Job description

Shift Technology seeks a Senior GRC Analyst to strengthen its security program within the Information Security department. You will manage compliance with major standards, lead risk assessments, oversee third-party security assurance, and support TrustOps for customer inquiries and due diligence.

You will report to the GRC Lead and collaborate across global teams to translate regulatory requirements into practical controls, policies, and governance programs that protect customers and data.