GRC Lead – Cyber Essentials Expert

Procore Technologies; Austin (TX); On-site; USD 137,000 - 188,000; Full time

Benefits offered by this job

Equity Compensation

Bonus Incentive Compensation

Job summary

Procore Technologies seeks a Staff GRC Analyst to own Cyber Essentials and Cyber Essentials Plus from end to end, interfacing with IT, security engineering, and the certification body. You’ll navigate scoping, testing, and renewal to ensure year-round audit readiness and confidence with UK public sector and enterprise customers.

You will work from the Austin office, leading controls validation, remediation, and cross-team coordination, while aligning with ISO 27001 and SOC 2 programs to

Qualifications

• 7+ years of experience in IT audit, GRC, or security compliance with end-to-end ownership of certs.
• Hands-on knowledge of endpoint and cloud security controls with testing in tools like Intune, Okta, AWS.

Responsibilities

• Own the Cyber Essentials and Cyber Essentials Plus certification cycle end to end.
• Define and maintain certification scope across devices, networks, cloud services, and user accounts.
• Validate five technical controls hands-on (firewalls, secure configuration, IAM, malware protection, patching).
• Drive remediation of control gaps and track fixes to closure before deadlines.
• Serve as primary contact for certification body and coordinate assessments and testing.
• Align Cyber Essentials with ISO 27001 and SOC 2 to reduce duplicate testing.
• Improve the program via automation and continuous control monitoring.
• Report status, risks, and readiness to leadership with clear decisions.

Skills

IT audit

GRC

security compliance

Cyber Essentials

End-to-end ownership

Intune

Okta

AWS

ISO 27001

SOC 2

NIST CSF

influence by leadership

GRC platforms

automation

mentoring

CISA

CISM

CISSP

ISO 27001 Lead Auditor

Education

Degree in IT/CS/Cybersecurity

Certifications: CISA/CISM/CISSP/ISO 27001 Lead Auditor

Tools

Intune

Okta

AWS

GRC platforms

Job description

Procore Technologies seeks a Staff GRC Analyst to own Cyber Essentials and Cyber Essentials Plus from end to end, interfacing with IT, security engineering, and the certification body. You’ll navigate scoping, testing, and renewal to ensure year-round audit readiness and confidence with UK public sector and enterprise customers.

You will work from the Austin office, leading controls validation, remediation, and cross-team coordination, while aligning with ISO 27001 and SOC 2 programs to