AI-Driven Cyber Risk Analyst, GRC & Risk Lifecycle

Procore Technologies; Austin (TX); On-site; USD 137,000 - 188,000; Full time

Benefits offered by this job

Equity compensation

Bonus incentive

Job summary

Procore Technologies is seeking a Staff Cybersecurity Risk Analyst to join the GRC organization. You will manage risk end-to-end, translate findings into actionable risks, and collaborate with architects, security teams, IT, and stakeholders to implement resilient security controls.

In this role you will leverage AI tools to accelerate risk drafting, evidence summarization, and reporting, while aligning with frameworks like ISO 27001, SOC 2, and NIST CSF/800-53.

Qualifications

• 6+ years in security risk management, GRC, or cybersecurity; cloud experience.
• Hands-on with risk above finding level; aggregating issues into risks; measuring residual risk.
• Current, hands-on AI fluency; structured prompts; aware of failure modes and data privacy.

Responsibilities

• Oversee end-to-end risk lifecycle management from assessment to closure and track treatment plans.
• Map findings to risks, create root-cause risks, and manage exceptions visibility.
• Link risks to controls; recommend best-practice controls and treatments; align with ISO 27001, SOC 2, NIST CSF/800-53.

Skills

AI fluency

Independent contributor

Stakeholder partnership

Technical knowledge

Communication

Tools

Jira

Google Workspace

Job description

Procore Technologies is seeking a Staff Cybersecurity Risk Analyst to join the GRC organization. You will manage risk end-to-end, translate findings into actionable risks, and collaborate with architects, security teams, IT, and stakeholders to implement resilient security controls.

In this role you will leverage AI tools to accelerate risk drafting, evidence summarization, and reporting, while aligning with frameworks like ISO 27001, SOC 2, and NIST CSF/800-53.