Senior Cyber Risk Analyst: AI-Powered GRC Lead

Procore; Austin (TX); On-site; USD 112,000 - 154,000; Full time

Benefits offered by this job

Equity compensation

Bonus incentive compensation

Job summary

Procore is seeking a Senior Cybersecurity Risk Analyst for its GRC organization to manage risks across cloud, SaaS, and information assets. You will map risks, coordinate with architects and engineers, and apply AI tools to accelerate risk statements and reporting.

The role emphasizes independent work, strong data quality discipline, and clear communication with technical and business stakeholders.

Qualifications

• 6+ years in security risk management, GRC, or cybersecurity with cloud exposure.
• Experience aggregating issues into broader risks and driving systemic treatment.
• Ability to measure and communicate residual risk clearly.
• Comfort using AI tools to support risk drafting and reporting.
• Strong writing and presentation skills for non-technical audiences.

Responsibilities

• End-to-End Risk Lifecycle Management: assess, score, track treatment, and close risks.
• Map findings to root causes and manage exceptions for visibility.
• Link risks to controls and frame remediation options across frameworks.
• Evaluate risks across cloud and SaaS, translate into actionable statements.
• Partner with architects, engineering, Security, IT, and owners.
• Ensure data quality and defensible risk register maintenance.
• Leverage AI tools to accelerate risk drafting, summarization, and reporting.

Skills

Security risk management

GRC

Cloud security

AI fluency

Data quality mindset

Stakeholder collaboration

Independent contributor

Technical writing

Communication

Education

Certifications: CRISC, CISM, CISSP

Tools

Jira

Google Workspace

Job description

Procore is seeking a Senior Cybersecurity Risk Analyst for its GRC organization to manage risks across cloud, SaaS, and information assets. You will map risks, coordinate with architects and engineers, and apply AI tools to accelerate risk statements and reporting.

The role emphasizes independent work, strong data quality discipline, and clear communication with technical and business stakeholders.