Senior Analyst, Security Governance, Risk & Compliance (GRC)

Jobvite, Inc.; Chelmsford (MA); Hybrid; USD 98,000 - 130,000; Full time

Benefits offered by this job

Equity options

High-quality health benefits

Retirement Plan with employer match

Career-growth opportunities

Flexible Time Off

Volunteer opportunities

Job summary

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to manage global security compliance programs. You will coordinate external audits and mature control adoption across IT and product units, reporting to the Director of GRC.

The role emphasizes scalable, automated, data-driven programs, with hands-on work in implementing controls, conducting gap analyses, and monitoring ongoing obligations with external entities.

Qualifications

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent.
• Industry certifications such as CompTIA Security+ or equivalent.
• Experience with frameworks like ISO 27001 and NIST SP 800-53.
• 3+ years in Information Security, AI, Automation or related roles.
• 0-1 years hands on experience in Agentic AI use cases with LLMs.

Responsibilities

• Coordinate external audit cycles related to US Federal Security Compliance and SLED programs.
• Lead and coordinate security controls implementation in in-scope applications.
• Drive gap analysis initiatives and modernize self-assessment processes.
• Coordinate ongoing continuous monitoring with external entities (monthly, quarterly).

Skills

Audit coordination

Security controls

Remediation across teams

AI use cases development

Education

Bachelor’s degree in Information Security, IT/Computer Science, or equivalent

Tools

ISO 27001

NIST SP 800-53

Job description

Job code: 27-0422

Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.

We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.

Envision yourself at Barracuda

We are seeking a motivated and detail-oriented Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team.

This role is focused on management of security compliance programs at Barracuda which have a global reach, and is inclusive of both coordinating an annual cycle of externally-led audits related to those programs, as well maturing the health of the audit scope by leading the continued adoption of related controls across Barracuda’s IT and Product business units. This role will report to the Director of Security Governance, Risk & Compliance (GRC)

The ideal candidate will have a keen interest in cutting edge technologies and how they can be used to transform and reimagine how security compliance related programs operate. You will help to drive structured programs, while simultaneously maturing them to enable them to become highly scalable, automated, and data-driven.

What you’ll be working on

• Own and lead the coordination of external audit cycles related to US Federal Security Compliance Programs and State and Local Government Compliance (SLED) programs, inclusive of such CMMC and GovRAMP Core & Moderate

• Leading and coordinating the implementation of security controls internally on in-scope applications as part of readiness activities

• Leading gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess

• Coordinating ongoing continuous monitoring obligations with external entities (eg monthly, quarterly)

What you bring to the role

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent

• Industry certifications such as CompTIA Security+ or equivalent

• Experience with various industry security frameworks such as ISO 27001, NIST SP 500-53

• Experience driving remediation across technical teams

• 3+ years of experience in Information Security, AI, Automation or related roles

• 0-1 years hands on experience in the development of Agentic AI use cases and usage of various LLMs

Nice to have

• Prior experience using the NIST SP 800-53 framework for the purposes of GovRAMP and CMMC compliance programs

What you’ll get from us

A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.

• Equity, in the form of non-qualifying options

• High-quality health benefits

• Retirement Plan with employer match

• Career-growth opportunities

• Flexible Time Off and Paid Time Off benefits

• Volunteer opportunities

The anticipated salary range for this role is $98,000 to $130,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.

At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost-of-living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates’ qualifications and experience.

# Hybrid