Remote Senior GRC Analyst: Risk & Compliance Leader

DriveTime; United States; Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Work From Home

Medical, dental, and vision coverage

401(K)

Paid Time Off

Tuition Reimbursement

Wellness Program

Competitive pay

Growth opportunities

Job summary

DriveTime is seeking a seasoned Sr. GRC Analyst to join our team and drive governance, risk, and compliance initiatives across the organization. You will translate security findings into business risk, support audits, and lead policy governance and third‑party assessments.

You will mentor others, improve GRC processes, and collaborate with Legal, Compliance, Internal Audit, and Vendor Management to strengthen our security posture.

Qualifications

• 4+ years of experience in Information Security GRC or related discipline.
• Bachelor’s degree in Information Security, Cybersecurity, IT, Business, Risk Management, Audit, or related field.
• Experience conducting risk assessments, evaluating controls, documenting findings, and remediation recommendations.
• Experience supporting and improving GRC processes, methodologies, workflows, and enabling technologies.
• Familiarity with NIST CSF and information security risk concepts.

Responsibilities

• Lead Information Security risk assessments and cyber risk management activities.
• Monitor compliance against policies, standards, frameworks, and regulatory requirements.
• Lead policy governance, audit support, third‑party security assessments, due diligence, and awareness programs.
• Provide risk guidance, reporting, and process improvement recommendations.
• Facilitate risk assessments and evaluate control effectiveness across tech and business environments.
• Develop clear risk statements and remediation recommendations for management.
• Support audits by coordinating evidence collection and remediation tracking.
• Conduct cybersecurity assessments of third‑party vendors and collaborate with partners.
• Coordinate responses to due diligence questionnaires and external assessments.
• Manage the information security policy lifecycle and approvals.

Skills

Cybersecurity risk management

Governance

Compliance

Stakeholder engagement

Risk assessment

Communication

Mentoring

Problem solving

Education

Bachelor’s degree in Information Security / Cybersecurity / IT / Risk Management

Tools

NIST CSF

Audit support tools

Job description

DriveTime is seeking a seasoned Sr. GRC Analyst to join our team and drive governance, risk, and compliance initiatives across the organization. You will translate security findings into business risk, support audits, and lead policy governance and third‑party assessments.

You will mentor others, improve GRC processes, and collaborate with Legal, Compliance, Internal Audit, and Vendor Management to strengthen our security posture.