Remote Senior GRC Analyst - Cyber Risk & Compliance Lead

DriveTime; Tempe (AZ); Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Work From Home

Medical, dental, and vision insurance

401(K)

Tuition Reimbursement

Wellness Program

Paid Time Off

Job summary

DriveTime is seeking a Senior GRC Analyst to lead information security risk assessments, manage compliance monitoring, and drive policy governance. You will partner with Legal, Compliance, Internal Audit, and Tech teams to assess risks, coordinate third-party reviews, and implement remediation actions.

The role emphasizes translating technical security findings into business risk, mentoring others, and enhancing GRC processes in a fast-growing organization.

Qualifications

• 4+ years in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or related discipline.
• Experience independently conducting risk assessments, evaluating controls, documenting findings, and advising remediation.
• Familiarity with NIST CSF and risk/control concepts.

Responsibilities

• Lead information security risk assessments and cyber risk management activities.
• Conduct compliance monitoring and control assessments against policies, standards, and regulatory requirements.
• Manage policy governance, audits, third-party security assessments, and security awareness programs.
• Provide risk guidance, reporting, and process improvements within GRC.
• Support audits by coordinating evidence collection and remediation tracking.
• Coordinate third-party risk assessments and responses to due diligence questionnaires.
• Maintain and improve the information security policy lifecycle and governance programs.
• Mentor junior analysts and promote consistent GRC practices.

Skills

Cybersecurity risk management

Governance & compliance

Security controls assessment

Business communication

Risk reporting

Education

Bachelor’s degree in Information Security/IT/Risk Management

Job description

DriveTime is seeking a Senior GRC Analyst to lead information security risk assessments, manage compliance monitoring, and drive policy governance. You will partner with Legal, Compliance, Internal Audit, and Tech teams to assess risks, coordinate third-party reviews, and implement remediation actions.

The role emphasizes translating technical security findings into business risk, mentoring others, and enhancing GRC processes in a fast-growing organization.