Lead Governance Risk & Compliance Analyst

West Unified Communications Services (formerly known as InterCall Asia Pacific); Longmont (CO); Hybrid; USD 115,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401(k) retirement plan

Paid time off

Parental leave

Training resources

Job summary

Intrado Life & Safety, Inc. is seeking a Lead Governance, Risk & Compliance Analyst in Longmont, CO. The role focuses on information security governance, risk, and compliance programs, ensuring policies and controls meet regulatory and contractual requirements.

The ideal candidate has 5–7+ years in GRC/audit, experience with NIST/ISO27001/SOC 2, and strong collaboration across Product, Legal, and Operations to drive risk mitigation and policy improvements.

Qualifications

• 5–7+ years of experience in Information Security governance, risk, compliance, or audit roles.
• Experience supporting or leading security frameworks (e.g., NIST, ISO 27001, SOC 2).
• Experience conducting risk assessments, managing policy programs, and participating in audits.
• Experience working cross‑functionally with technical and non‑technical stakeholders.

Responsibilities

• Lead governance, risk, and compliance programs, aligning policies with regulatory and contractual requirements.
• Lead enterprise information security risk assessments and coordinate risk management activities.
• Coordinate SOC 2 readiness, audits, and evidence collection; manage policy lifecycle.

Skills

GRC frameworks

Cybersecurity fundamentals

Risk assessment

Communication skills

Organizational skills

Attention to detail

Stakeholder influence

Policy & controls

Education

Bachelor’s degree

Job description

• Longmont, Colorado

Lead Governance Risk & Compliance Analyst

• Longmont, Colorado
• Engineering & Technology
• Hybrid
• 4688

Intrado Life & Safety, Inc.

About Us

Intrado is dedicated to saving lives and protecting communities, helping them prepare for, respond to, and recover from critical events. Our cutting-edge company strives to become the most trusted, data-centric emergency services partner by uniting fragmented communications into actionable intelligence for first responders. At Intrado, all of our work truly matters.

Responsibilities/Qualifications

The Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject‑matter expert and operational lead for the organization’s information security governance, risk, and compliance programs. This role ensures alignment of security policies, standards, and controls with regulatory, contractual, and industry‑recognized frameworks, while supporting business partners in understanding and managing information‑security risk. The Lead GRC Analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due‑diligence requests. This position mentors other analysts, coordinates GRC workflows, facilitates cross‑functional decision‑making, and drives continuous improvement in the organization’s risk management and compliance posture.

Governance and Policy Management

• Lead development, review, and maintenance of information security policies, standards, and procedures.
• Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls.
• Ensure policies comply with regulatory, statutory, and contractual requirements.
• Advise leadership on security governance best practices and control maturity.
• Support communication and adoption of governance requirements across the organization.

Risk Management and Security Assessments

• Lead enterprise Information Security risk assessments, including risk identification, analysis, and recommended treatment plans.
• Evaluate risks across products, technologies, vendors, and operational processes; ensure alignment with organizational risk tolerance.
• Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies.
• Maintain risk registers, metrics, and reporting for leadership visibility.
• Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology.

Compliance and Regulatory Support

• Lead security compliance initiatives, including internal audits, external audits, SOC 2 readiness, and certification activities.
• Coordinate evidence collection, control testing, documentation, and remediation tracking.
• Ensure adherence to regulatory and contractual obligations relating to information security and privacy.
• Partner with internal and external auditors to validate control effectiveness.

Security Questionnaires and External Requests

• Oversee completion of customer security questionnaires, RFP responses, and client audits.
• Ensure accuracy, consistency, and completeness of security representations provided to customers.
• Manage documentation packages, including security overviews, policy references, and evidence artifacts.
• Guide internal teams on compliance commitments and customer requirements.

Vendor and Third-Party Security Governance

• Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements.
• Support vendor risk classification, onboarding, and ongoing monitoring.
• Ensure approved vendors adhere to security standards and contractual obligations.

Minimum Education

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or related field.

Minimum Experience

• 5–7+ years of experience in Information Security governance, risk, compliance, or audit roles.
• Experience supporting or leading security frameworks (e.g., NIST, ISO 27001, SOC 2).
• Experience conducting risk assessments, managing policy programs, and participating in audits.
• Experience working cross‑functionally with technical and non‑technical stakeholders.

Knowledge, Skills & Abilities

• Deep knowledge of governance, risk, and compliance frameworks (NIST CSF, ISO 27001, SOC 2, regulatory obligations).
• Strong understanding of cybersecurity fundamentals, enterprise risk management, and control design.
• Excellent ability to interpret and apply security requirements to business processes and technology landscapes.
• Proficiency in assessing risk, evaluating controls, and documenting remediation plans.
• Exceptional communication skills, including the ability to simplify complex security concepts for diverse audiences.
• Strong organizational skills with the ability to manage multiple concurrent priorities.
• High attention to detail, accuracy, and quality in documentation and evidence preparation.
• Ability to influence stakeholders and guide decision‑making through expert‑level recommendations.

Travel Requirements

• May be required to travel up to 25% of the time depending on business needs.

Physical Requirements

• Position requires long periods of sitting, typing, and participating in phone or video calls.

Total Rewards

Want to love where you work? At Intrado, we offer a comprehensive benefits package that includes what you’d expect (medical, dental, vision, life and disability coverage, paid time off, a 401(k) retirement plan, and several that go above and beyond– paid parental leave, access to a robust library of personal and professional training resources, employee discounts, critical illness, hospital indemnity, access to legal support, pet insurance, identity theft protection,an EAP (Employee Assistance Program) that includes free mental health resources/support, and more! work worth doing

The starting salary is anticipated between $115,000 and $140,000 and will be commensurate with experience.

Intrado is an Equal Opportunity Employer – Veterans/Disabled and Other Protected Categories. Our Company welcomes and encourages applications of individuals with disabilities. Accommodations are available on request for candidates taking part in all aspects of the selection process. Intrado maintains a Drug Free Workplace.