Senior GRC & AI Governance Analyst

Socket.dev; Richardson (TX); On-site; USD 85,000 - 135,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Disability Insurance

Life Insurance

Sick Time

Unlimited Vacation

401(k) with company match

Job summary

Berry Appleman & Leiden (BAL) in Richardson, TX, is seeking an experienced Information Security, GRC, or Privacy professional to lead audits, risk assessments, and policy governance within our ISO-aligned program.

You will partner with security, legal, and operations teams to strengthen controls, manage third-party risk, and advance AI governance while supporting incident response and BC/DR readiness.

Qualifications

• Experience applying risk management methodologies to security, privacy, and compliance risks.
• Knowledge of ISO 27001, ISO 27701, NIST CSF, and privacy regulations.
• Ability to translate regulatory obligations into operational controls.
• Experience conducting internal audits and remediation tracking.
• Familiarity with Third-Party Risk Management (TPRM) and vendor due diligence.
• Experience with Data Loss Prevention (DLP) tooling and security operations.
• Ability to report KPIs/KRIs to executives.
• Strong communication and collaboration skills.

Responsibilities

• Lead internal audits and risk-based assessment planning.
• Support ISMS and PIMS maintenance for ISO certifications.
• Support privacy program operations including DPIAs and DSAR.
• Contribute to AI governance framework and vendor due diligence.
• Perform third-party risk assessments and maintain the vendor risk register.
• Operate DLP tools and coordinate with SecOps.
• Assist with incident response and security operations reviews.
• Own BC/DR program documentation, testing, and reporting.
• Develop GRC metrics and executive KPI reporting.
• Support data governance initiatives and data lifecycle management.

Skills

Risk management

ISO 27001 / 27701

NIST CSF

Privacy regulations

Audit planning

Vendor risk management

Data Loss Prevention

Communication skills

Education

Bachelor’s degree in related field or equivalent experience

Tools

ISO 27001

ISO 27701

NIST CSF

GDPR & Privacy Laws

Job description

Berry Appleman & Leiden (BAL) in Richardson, TX, is seeking an experienced Information Security, GRC, or Privacy professional to lead audits, risk assessments, and policy governance within our ISO-aligned program.

You will partner with security, legal, and operations teams to strengthen controls, manage third-party risk, and advance AI governance while supporting incident response and BC/DR readiness.