GRC Analyst - AI Security & Policy Lead

Metropolis; Los Angeles (CA); On-site; USD 100,000 - 135,000; Full time

Benefits offered by this job

Office on-site 4 days/week

Job summary

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team. Reporting to the Senior Manager, GRC, you will mature information security policies, drive employee security awareness, and pioneer our AI governance framework.

You will partner across Technology, Legal, Internal Audit, Procurement, and People Operations to safeguard customer trust and support operational excellence.

Qualifications

• 3+ years of experience in information security GRC, cybersecurity training, or technology compliance.
• Proven track record of managing required security awareness programs and driving cross-functional accountability.
• Experience with modern training orchestration platforms and understanding of AI and machine learning data security.
• Working knowledge of SOC 2 and PCI-DSS frameworks.
• Strong communication skills to explain regulatory needs to non-technical staff.
• Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline.

Responsibilities

• Author, update, and enforce corporate security policies to guarantee cross-departmental compliance
• Deploy and manage required information security training campaigns as the platform owner
• Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs
• Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams
• Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails
• Report training metrics, policy exceptions, and risk postures directly to senior management
• Review vendor security profiles and software pipelines to mitigate security risk

Skills

GRC experience

Security training

Regulatory compliance

SOC 2 knowledge

PCI-DSS knowledge

Communication skills

Education

Bachelor's degree in Cybersecurity or Information Systems

Tools

Training platforms

Job description

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team. Reporting to the Senior Manager, GRC, you will mature information security policies, drive employee security awareness, and pioneer our AI governance framework.

You will partner across Technology, Legal, Internal Audit, Procurement, and People Operations to safeguard customer trust and support operational excellence.