Security GRC Senior Analyst

Barracuda Networks; Ann Arbor (MI); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Retirement plan with employer match

Career-growth opportunities

Flexible Time Off

Paid Time Off

Volunteer opportunities

Equity options

Job summary

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join its Information Security team in the United States. The role focuses on managing security compliance programs with a global reach, including annual externally-led audits and ongoing expansion of controls across Barracuda’s IT and Product units.

The ideal candidate will own external audit cycles for GovRAMP/CMMC and lead readiness activities while maturing automation and data-driven governance,

Qualifications

• 3+ years of experience in Information Security, AI, Automation or related roles.
• Experience driving remediation across technical teams and coordinating audits.
• Experience with GovRAMP and CMMC compliance programs using NIST SP 800-53.

Responsibilities

• Own and lead external audit cycles for US Federal Security Compliance and SLED programs.
• Coordinate implementation of security controls in in-scope applications during readiness activities.
• Lead gap analyses and modernize self-assessment processes.
• Coordinate continuous monitoring with external entities (monthly, quarterly).

Skills

InfoSec experience

AI/Automation

GRC coordination

Education

Bachelor’s degree in Information Security or IT/CS

Tools

NIST SP 800-53

ISO 27001

GovRAMP

CMMC

Job description

• We are seeking a motivated and detail-oriented Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team
• This role is focused on management of security compliance programs at Barracuda which have a global reach, and is inclusive of both coordinating an annual cycle of externally-led audits related to those programs, as well maturing the health of the audit scope by leading the continued adoption of related controls across Barracuda’s IT and Product business units
• This role will report to the Director of Security Governance, Risk & Compliance (GRC)
• The ideal candidate will have a keen interest in cutting edge technologies and how they can be used to transform and reimagine how security compliance related programs operate
• You will help to drive structured programs, while simultaneously maturing them to enable them to become highly scalable, automated, and data-driven
• Own and lead the coordination of external audit cycles related to US Federal Security Compliance Programs and State and Local Government Compliance (SLED) programs, inclusive of such CMMC and GovRAMP Core & Moderate
• Leading and coordinating the implementation of security controls internally on in-scope applications as part of readiness activities
• Leading gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess
• Coordinating ongoing continuous monitoring obligations with external entities (eg monthly, quarterly)

Benefits

• High-quality health benefits
• Retirement Plan with employer match
• Career-growth opportunities
• Flexible Time Off and Paid Time Off benefits
• Volunteer opportunities
• Equity, in the form of non-qualifying options

3+ years of experience in Information Security, AI, Automation or related roles0-1 years hands on experience in the development of Agentic AI use cases and usage of various LLMsBachelor’s degree in Information Security, IT/Computer Science, or equivalentExperience driving remediation across technical teamsIndustry certifications such as CompTIA Security+ or equivalentExperience with various industry security frameworks such as ISO 27001, NIST SP 500-53Prior experience using the NIST SP 800-53 framework for the purposes of GovRAMP and CMMC compliance programs