GRC Analyst II — AI Governance & Security Policy

Metropolis; Chicago (IL); On-site; USD 100,000 - 135,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Stock option plan

Bonus plans

Life insurance

Disability coverage

Job summary

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our Security team in Chicago. You will mature information security policies, drive employee security awareness, and pioneer our AI governance framework across Technology, Legal, Internal Audit, Procurement, and People Operations.

The role requires 3+ years of experience in information security GRC and a Bachelor’s degree, with four days in office and a base salary between $100,000 and $135,000 USD annually, depending

Qualifications

• 3+ years of experience in information security GRC, cybersecurity training, or technology compliance.
• Proven track record of security awareness programs and cross-functional accountability.
• Experience with training orchestration platforms and AI data security.
• Working knowledge of SOC 2 and PCI-DSS frameworks.
• Ability to explain regulatory needs to non-technical staff.
• Bachelor’s degree in Cybersecurity or related field.

Responsibilities

• Author, update, and enforce corporate security policies to guarantee cross-departmental compliance
• Deploy and manage required information security training campaigns as the platform owner
• Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs
• Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams
• Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails
• Report training metrics, policy exceptions, and risk postures directly to senior management
• Review vendor security profiles and software pipelines to mitigate security risk

Skills

Security awareness training

Cross-functional collaboration

Regulatory knowledge

Communication

AI governance understanding

Education

Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline

Tools

SOC 2

PCI-DSS

Training platforms

Job description

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our Security team in Chicago. You will mature information security policies, drive employee security awareness, and pioneer our AI governance framework across Technology, Legal, Internal Audit, Procurement, and People Operations.

The role requires 3+ years of experience in information security GRC and a Bachelor’s degree, with four days in office and a base salary between $100,000 and $135,000 USD annually, depending