GRC Analyst / Engineer

Prestige Staffing; New York (NY); Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Equity participation

Opportunity for growth

Flexible remote work environment

Job summary

A leading staffing firm is seeking a Senior Governance, Risk, and Compliance (GRC) Analyst / Engineer. In this role, you will work on security best practices and compliance for cutting-edge robotic delivery solutions. You'll assess risks related to financial and IT systems, collaborate on compliance frameworks, and manage security initiatives. Ideal candidates should have experience with security tools and be able to analyze metrics. This position allows for remote work within a collaborative environment and offers growth opportunities in an innovative company.

Qualifications

• Subject matter expert on security best practices and compliance standards.
• Experience with compliance audits and third-party vendor assessments.
• Project management skills in fast-paced environments.

Responsibilities

• Maintain and update security policies and procedures.
• Perform risk assessments of third-party vendors.
• Prepare reports for leadership on compliance status.

Skills

Knowledge of ISO 27001/2

Experience in compliance frameworks (SOX, GDPR, CCPA)

Familiarity with security documentation

Proficiency with GRC or IRM tools

Ability to analyze metrics using BI tools

Excellent project management skills

Education

ISO/IEC 27001 Lead Implementer/Auditor

CISA

CISSP

Tools

Archer

ZenGRC

RSAM

Vanta

PowerBI

Looker

Job description

We are seeking a talented Senior Governance, Risk, and Compliance (GRC) Analyst / Engineer to join our innovative team focused on advancing robotic delivery solutions in urban environments. In this role, you will collaborate with business and technology stakeholders to ensure security best practices are integrated across our systems and processes. As a high-level subject matter expert, you will assess and mitigate risks related to the company’s financial and IT systems, supporting the growth of our cutting-edge robotics platform that is already transforming city deliveries in multiple markets.

Requirements

• Knowledge of ISO 27001/2, SOC 2 trust principles, and information security best practices
• Experience in compliance frameworks such as SOX Section 404 IT General Controls, GDPR, CCPA
• Familiarity with security documentation, risk assessments, and audit procedures
• Experience with compliance audits and supporting third-party vendor risk assessments
• Proficiency with GRC or IRM tools such as Archer, ZenGRC, RSAM, or Vanta
• Ability to develop and analyze security and compliance metrics using BI tools like PowerBI or Looker
• Excellent project management skills with the ability to prioritize in a fast-paced environment
• Desired certifications: ISO/IEC 27001 Lead Implementer/Auditor, CISA, CISSP

Responsibilities

• Serve as a subject matter expert on security best practices and compliance standards
• Maintain and update security policies, procedures, and assessment methodologies
• Manage security awareness initiatives and conduct phishing simulations
• Perform risk assessments of third-party vendors and implement corrective actions
• Support IT audits, track findings, and ensure remediation activities are completed timely
• Oversee compliance frameworks, risk control matrices, and automation tools
• Prepare reports and updates for senior leadership on compliance status and risk mitigation efforts
• Equity participation in a fast-growing, innovative public company (spun off from Uber and Postmates)
• Opportunity to grow within a pioneering robotics company
• Work remotely from anywhere in a flexible, collaborative environment
• Join a diverse team of industry veterans solving real-world urban mobility challenges