Remote GRC Security Analyst: Risk & Compliance

DriveTime Sales and Finance Company, LLC; Tempe (AZ); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Work From Home

Medical, dental, and vision coverage

401(K) and life insurance

Tuition reimbursement

Wellness program

Job summary

DriveTime Family of Brands is seeking an experienced Sr. GRC Analyst to lead governance, risk, and compliance initiatives across the organization. You will translate security findings into business risk, drive remediation, and support audits and third-party assessments.

Responsibilities include risk assessment leadership, policy governance, and mentoring teammates while partnering with Legal, IT, and Vendor Management to strengthen overall security posture.

Qualifications

• 4+ years of experience in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or related discipline.
• Experience independently conducting risk assessments, evaluating controls, documenting findings, and recommending remediation.
• Familiarity with the NIST CSF and related regulatory concepts.

Responsibilities

• Lead Information Security risk assessments and cyber risk management activities.
• Perform compliance monitoring against policies, standards, frameworks, contractual obligations, and regulatory requirements.
• Lead GRC services such as policy governance, audits, third-party assessments, and security awareness programs.
• Provide risk guidance, reporting, and mentorship within the GRC function.

Skills

Cybersecurity risk management

Governance & compliance

Risk assessment

Communication

Mentoring/leadership

Education

Bachelor's degree in Information Security or related field

Tools

NIST CSF

PCI DSS

SOC reports

Job description

DriveTime Family of Brands is seeking an experienced Sr. GRC Analyst to lead governance, risk, and compliance initiatives across the organization. You will translate security findings into business risk, drive remediation, and support audits and third-party assessments.

Responsibilities include risk assessment leadership, policy governance, and mentoring teammates while partnering with Legal, IT, and Vendor Management to strengthen overall security posture.