Lead Governance Risk & Compliance Analyst

Intrado; Longmont (CO); On-site; USD 115,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision care

401(k) retirement

Paid time off

Parental leave

Employee discounts

Training resources

Job summary

Intrado is seeking a Lead Governance, Risk & Compliance Analyst to spearhead information security governance, risk, and compliance initiatives. You will drive policy lifecycle, risk assessments, audit readiness, and customer due‑diligence responses while mentoring other analysts.

You will collaborate with product, engineering, legal, and operations to strengthen the organization’s risk posture and regulatory adherence, including SOC 2 and ISO 27001 frameworks, in a fast‑paced environment.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or related field.
• 5–7+ years of experience in information security governance, risk, compliance, or audit roles.
• Experience supporting or leading security frameworks (NIST, ISO 27001, SOC 2).
• Experience conducting risk assessments, managing policy programs, and audits.
• Ability to work cross-functionally with technical and non-technical stakeholders.

Responsibilities

• Lead governance, risk, and compliance programs to align with regulatory and contractual requirements.
• Oversee risk assessments and risk registers; produce leadership reports.
• Manage policy lifecycle, audits, and SOC 2 readiness activities.
• Coordinate evidence collection and remediation tracking for audits.
• Guide internal teams on compliance commitments and customer requirements.

Skills

GRC governance

Risk management

Compliance

Audit readiness

Regulatory frameworks

Cross-functional collaboration

Excellent communication

NIST CSF

ISO 27001

SOC 2

Education

Bachelor’s degree in Information Security or related field

Tools

NIST CSF

ISO 27001

SOC 2

Job description

About Us

Intrado is dedicated to saving lives and protecting communities, helping them prepare for, respond to, and recover from critical events. Our cutting‑edge companystrives to become the most trusted, data‑centric emergency services partner by uniting fragmented communications into actionable intelligence for first responders. At Intrado, all of our work truly matters.

Responsibilities/Qualifications

The Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject‑matter expert and operational lead for the organization’s information security governance, risk, and compliance programs. This role ensures alignment of security policies, standards, and controls with regulatory, contractual, and industry‑recognized frameworks, while supporting business partners in understanding and managing information‑security risk. The Lead GRC Analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due‑diligence requests. This position mentors other analysts, coordinates GRC workflows, facilitates cross‑functional decision‑making, and drives continuous improvement in the organization’s risk management and compliance posture.

Governance and Policy Management

• Lead development, review, and maintenance of information security policies, standards, and procedures.
• Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls.
• Ensure policies comply with regulatory, statutory, and contractual requirements.
• Advise leadership on security governance best practices and control maturity.
• Support communication and adoption of governance requirements across the organization.

Risk Management and Security Assessments

• Lead enterprise Information Security risk assessments, including risk identification, analysis, and recommended treatment plans.
• Evaluate risks across products, technologies, vendors, and operational processes; ensure alignment with organizational risk tolerance.
• Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies.
• Maintain risk registers, metrics, and reporting for leadership visibility.
• Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology.

Compliance and Regulatory Support

• Lead security compliance initiatives, including internal audits, external audits, SOC 2 readiness, and certification activities.
• Coordinate evidence collection, control testing, documentation, and remediation tracking.
• Ensure adherence to regulatory and contractual obligations relating to information security and privacy.
• Partner with internal and external auditors to validate control effectiveness.

Security Questionnaires and External Requests

• Oversee completion of customer security questionnaires, RFP responses, and client audits.
• Ensure accuracy, consistency, and completeness of security representations provided to customers.
• Manage documentation packages, including security overviews, policy references, and evidence artifacts.
• Guide internal teams on compliance commitments and customer requirements.

Vendor and Third-Party Security Governance

• Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements.
• Support vendor risk classification, onboarding, and ongoing monitoring.
• Ensure approved vendors adhere to security standards and contractual obligations.

Minimum Education

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or related field.

Minimum Experience

• 5–7+ years of experience in Information Security governance, risk, compliance, or audit roles.
• Experience supporting or leading security frameworks (e.g., NIST, ISO 27001, SOC 2).
• Experience conducting risk assessments, managing policy programs, and participating in audits.
• Experience working cross‑functionally with technical and non‑technical stakeholders.

Knowledge, Skills & Abilities

• Deep knowledge of governance, risk, and compliance frameworks (NIST CSF, ISO 27001, SOC 2, regulatory obligations).
• Strong understanding of cybersecurity fundamentals, enterprise risk management, and control design.
• Excellent ability to interpret and apply security requirements to business processes and technology landscapes.
• Proficiency in assessing risk, evaluating controls, and documenting remediation plans.
• Exceptional communication skills, including the ability to simplify complex security concepts for diverse audiences.
• Strong organizational skills with the ability to manage multiple concurrent priorities.
• High attention to detail, accuracy, and quality in documentation and evidence preparation.
• Ability to influence stakeholders and guide decision‑making through expert‑level recommendations.

Travel Requirements

• May be required to travel up to 25% of the time depending on business needs.

Physical Requirements

• Position requires long periods of sitting, typing, and participating in phone or video calls.

Total Rewards

Want to love where you work? At Intrado, we offer a comprehensive benefits package that includes what you’d expect (medical, dental, vision, life and disability coverage, paid time off, a 401(k) retirement plan, and several that go above and beyond– paid parental leave, access to a robust library of personal and professional training resources, employee discounts, critical illness, hospital indemnity, access to legal support, pet insurance, identity theft protection,an EAP (Employee Assistance Program) that includes free mental health resources/support, and more!

The starting salary is anticipated between $115,000 and $140,000 and will be commensurate with experience.

Intrado is an Equal Opportunity Employer – Veterans/Disabled and Other Protected Categories. Our Company welcomes and encourages applications of individuals with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. Intrado maintains a Drug Free Workplace.