Senior Analyst, Security Governance, Risk & Compliance (GRC)

Barracuda; Chelmsford (MA); Hybrid; USD 98,000 - 130,000; Full time

Benefits offered by this job

Equity

High-quality health benefits

Retirement Plan with employer match

Career-growth opportunities

Flexible Time Off and Paid Time Off

Job summary

Barracuda is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team. This role focuses on managing global security compliance programs, coordinating external audits, and maturing controls across IT and Product units.

You will drive structured, scalable, automated, data-driven processes, report to the Director of GRC, and collaborate with cross-functional teams.

Qualifications

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent.
• CompTIA Security+ or equivalent certification.
• Experience with ISO 27001 and NIST SP 500-53.
• 3+ years in Information Security, AI, or related roles.
• 0-1 years in development of Agentic AI use cases and LLMs.

Responsibilities

• Own and lead coordination of external audit cycles related to US Federal Security Compliance Programs and SLED programs, including CMMC and GovRAMP Core & Moderate.
• Lead and coordinate the implementation of security controls internally on in-scope applications as part of readiness activities.
• Lead gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess.
• Coordinate ongoing continuous monitoring obligations with external entities (eg monthly, quarterly).

Skills

Security governance

Audit coordination

Regulatory compliance

AI/Automation in security

Remediation leadership

Education

Bachelor's degree in Information Security / IT / Computer Science

Tools

ISO 27001

NIST SP 800-53

Job description

Envision yourself at Barracuda

Job code: 27-0422

Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.

We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.

We are seeking a motivated and detail-oriented Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team.

This role is focused on management of security compliance programs at Barracuda which have a global reach, and is inclusive of both coordinating an annual cycle of externally-led audits related to those programs, as well maturing the health of the audit scope by leading the continued adoption of related controls across Barracuda’s IT and Product business units. This role will report to the Director of Security Governance, Risk & Compliance (GRC).

The ideal candidate will have a keen interest in cutting edge technologies and how they can be used to transform and reimagine how security compliance related programs operate. You will help to drive structured programs, while simultaneously maturing them to enable them to become highly scalable, automated, and data-driven.

What You’ll Be Working On

• Own and lead the coordination of external audit cycles related to US Federal Security Compliance Programs and State and Local Government Compliance (SLED) programs, inclusive of such CMMC and GovRAMP Core & Moderate
• Leading and coordinating the implementation of security controls internally on in-scope applications as part of readiness activities
• Leading gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess
• Coordinating ongoing continuous monitoring obligations with external entities (eg monthly, quarterly)

What You Bring To The Role

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent
• Industry certifications such as CompTIA Security+ or equivalent
• Experience with various industry security frameworks such as ISO 27001, NIST SP 500-53
• Experience driving remediation across technical teams
• 3+ years of experience in Information Security, AI, Automation or related roles
• 0-1 years hands on experience in the development of Agentic AI use cases and usage of various LLMs

Nice to have

• Prior experience using the NIST SP 800-53 framework for the purposes of GovRAMP and CMMC compliance programs

What You’ll Get From Us

A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility – there are opportunities for cross training and the ability to attain your next career step within Barracuda.

• Equity, in the form of non-qualifying options
• High-quality health benefits
• Retirement Plan with employer match
• Career-growth opportunities
• Flexible Time Off and Paid Time Off benefits
• Volunteer opportunities

The anticipated salary range for this role is $98,000 to $130,000. Actual compensation offered will be dependent upon the individual's skills, experience, and qualifications as they directly relate to the requirements of the position, the budget for the position, and applicable employment laws.

At Barracuda, we believe in fair and equitable compensation practices that reflect both market realities and the unique circumstances of each geographical location. We recognize that cost-of-living disparities, market conditions, and other factors can significantly impact compensation expectations in different regions. The compensation range provided in this job description is for illustrative purposes only and may not reflect the actual compensation offers for the position in your location. Final compensation will be determined based on a variety of factors including the candidates’ qualifications and experience.

# Hybrid