GRC Security Analyst — Compliance & Audit Expert

Clear Capital; United States; On-site; USD 114,000 - 139,000; Full time

Benefits offered by this job

Profit-sharing bonus

Communication stipends

Referral bonuses

Job summary

Clear Capital is seeking a GRC Security Analyst to safeguard our mortgage and appraisal technology platform. You will manage governance, risk, and compliance programs, coordinate audits, and advise partners on security controls and regulatory requirements.

The role requires deep knowledge of NIST CSF/RMF, ISO 27001, SOC 2, GLBA, GDPR/CCPA, plus experience with security metrics, vendor risk, and policy development. Certifications such as CISSP or CISM are preferred.

Qualifications

• 5+ years in GRC, security compliance, or risk management with a Bachelor’s degree
• Knowledge of NIST CSF, SOC 2, ISO 27001/42001, data privacy regs (GLBA, GDPR, CCPA)
• Security certifications like CISSP/CISM/CISA/CRISC or equivalent

Responsibilities

• Monitor and enforce compliance with major security frameworks and regulations
• Lead audits, define scopes, coordinate remediation
• Develop and maintain security policies and procedures
• Assess vendor security postures and contractual requirements
• Produce management and regulatory reports on compliance activities
• Define and track qualitative and quantitative security metrics

Skills

CISSP

CISM

CISA

CRISC

AIGP

GRC communications

Analytical problem solving

Stakeholder influence

Education

Bachelor’s degree

Master’s degree

Tools

Vanta

Drata

OneTrust

Job description

Clear Capital is seeking a GRC Security Analyst to safeguard our mortgage and appraisal technology platform. You will manage governance, risk, and compliance programs, coordinate audits, and advise partners on security controls and regulatory requirements.

The role requires deep knowledge of NIST CSF/RMF, ISO 27001, SOC 2, GLBA, GDPR/CCPA, plus experience with security metrics, vendor risk, and policy development. Certifications such as CISSP or CISM are preferred.