AI-Powered Cyber Risk Analyst (GRC, Cloud)

Procore Technologies, Inc.; Austin, Northern (TX, KY); Hybrid; USD 137,000 - 188,000; Full time

Job summary

Procore Technologies, Inc. is seeking a Staff Cybersecurity Risk Analyst to lead end-to-end risk management within the GRC organization.

You will partner with security, engineering, IT, and business teams to assess, score, treat, and report on security risks across the cloud and SaaS ecosystem. The role requires 6+ years in security risk management with hands-on cloud experience, strong AI fluency, and a data-quality mindset.

Qualifications

• Experience: 6+ years in security risk management, GRC, or cybersecurity with cloud exposure.
• AI fluency: proficient with LLMs, prompts, and AI-powered risk workflows.
• Data quality mindset: identify stale records, inconsistent scores, and unclear ownership.

Responsibilities

• End-to-End Risk Lifecycle Management: manage risks from assessment to closure and align with risk appetite.
• Map findings to risks, root causes, and treatment plans, tracking exceptions.
• Link risks to controls and framework alignment (ISO 27001, SOC 2, NIST CSF/800-53).
• Assess risks and configurations across cloud/SaaS, translating to actionable statements.
• Collaborate with architects, engineering, Security, IT, and business owners.
• Maintain a complete, current, defensible risk register and ownership.
• Leverage AI tooling to speed risk statement drafting, evidence summarization, and reporting.

Skills

Security risk management

GRC experience

AI fluency

Data quality

Jira fluency

Google Workspace

Stakeholder collaboration

Independent contributor

Cloud security knowledge

Security frameworks (ISO 27001, SOC 2,

NIST CSF/NIST 800-53

Communication skills

Prompt engineering / AI tooling

Vulnerability/pen test awareness

Tools

Jira

Google Workspace

Job description

Procore Technologies, Inc. is seeking a Staff Cybersecurity Risk Analyst to lead end-to-end risk management within the GRC organization.

You will partner with security, engineering, IT, and business teams to assess, score, treat, and report on security risks across the cloud and SaaS ecosystem. The role requires 6+ years in security risk management with hands-on cloud experience, strong AI fluency, and a data-quality mindset.