AI-Driven Senior Cyber Risk & GRC Analyst

Icehouseventures; Austin (TX); On-site; USD 112,000 - 154,000; Full time

Benefits offered by this job

Equity compensation

Job summary

Procore is seeking a Senior Cybersecurity Risk Analyst to drive end-to-end risk lifecycle management across our cloud and SaaS environments. You will map risks to controls, leverage AI tooling for rapid risk statements, and partner with architects, engineering, and IT to validate severity and treatments.

Ideal candidates have 6+ years in security risk management, hands-on cloud exposure, and fluency with AI-enabled GRC workflows.

Qualifications

• 6+ years in security risk management, GRC, or cybersecurity with cloud exposure.
• Hands-on experience aggregating issues into broader risks and driving systemic treatment.
• Familiarity with cloud security and at least one security framework (ISO 27001, SOC 2, NIST CSF/800-53).
• Strong writing and presentation skills for technical to non-technical audiences.

Responsibilities

• End-to-End Risk Lifecycle Management: assess, score, treat, accept, and close risks.
• Map risks to controls and align with frameworks to close gaps.
• Translate risk findings into actionable statements and defensible risk ratings.
• Partner with architects, security, IT, and business stakeholders to validate severity.

Skills

AI fluency

GRC risk management

Stakeholder collaboration

Independent contributor

Cloud security

Security frameworks

Communication

Vulnerability management

Tools

Jira

Google Workspace

Job description

Procore is seeking a Senior Cybersecurity Risk Analyst to drive end-to-end risk lifecycle management across our cloud and SaaS environments. You will map risks to controls, leverage AI tooling for rapid risk statements, and partner with architects, engineering, and IT to validate severity and treatments.

Ideal candidates have 6+ years in security risk management, hands-on cloud exposure, and fluency with AI-enabled GRC workflows.