Remote Staff Security Analyst II, GRC - Audit & Compliance

JDA Software; Dallas, Northern (TX, KY); Hybrid; USD 130,000 - 164,000; Full time

Job summary

Blue Yonder is seeking a Staff Security Analyst II, GRC, to lead IT and security control assessments and drive remediation with cross-functional teams. The role ensures controls meet regulatory, industry, and internal standards and supports audits across the organization.

Ideal candidates bring 7+ years in security compliance or IT audit, strong knowledge of ISO27001/SOC frameworks, cloud security, and excellent communication to coordinate with stakeholders and audit teams.

Qualifications

• 7 years of information security compliance or IT audit experience.
• Strong understanding of IT and security control frameworks (ISO 27001, SOC1, SOC2).
• Familiarity with cloud security and shared responsibility model.
• Experience performing end-to-end IT and security control testing and remediation tracking.
• Excellent communication and stakeholder management skills.

Responsibilities

• Lead internal IT and security control assessments aligned with standards (ISO 27001/27701/22301, SOC1/2 Type II).
• Identify control deficiencies and drive remediation with stakeholders.
• Support evidence collection and documentation for audits.
• Regularly communicate compliance posture to stakeholders and leadership.
• Plan, coordinate and manage internal and external audit activities and remediation to closure.

Skills

Information security compliance

IT audit

ISO 27001

SOC 1/2

Cloud security

Audit testing

Communication

Analytical thinking

Security frameworks

Education

Bachelor's degree in Information Systems, Accounting, Business or related field

Job description

Blue Yonder is seeking a Staff Security Analyst II, GRC, to lead IT and security control assessments and drive remediation with cross-functional teams. The role ensures controls meet regulatory, industry, and internal standards and supports audits across the organization.

Ideal candidates bring 7+ years in security compliance or IT audit, strong knowledge of ISO27001/SOC frameworks, cloud security, and excellent communication to coordinate with stakeholders and audit teams.