Senior GRC Analyst

Request Technology, LLC; Austin (TX); On-site; USD 120,000 - 160,000; Full time

Job summary

Request Technology, LLC is seeking an Information Security professional to lead risk assessments, vendor security reviews, and client-facing security discussions, applying ISO 27001, NIST, SOC, and SIG frameworks.

You will create and evolve security policies, manage IT and third‑party risk programs, mentor teams, and champion GRC platforms while guiding governance, risk, and compliance workflows across the organization.

Qualifications

• Bachelor's degree in information security or a related field.
• 4+ years of Information Security experience with risk assessments and vendor reviews.
• Experience documenting evidence and leading client-facing security discussions.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits.
• Create, maintain, and evolve security policies, standards, and guidelines.
• Manage IT security programs to meet cybersecurity, risk, and compliance requirements.
• Advise technical and non-technical stakeholders on information security.
• Oversee third-party Security Vendor Risk Management program and lifecycle.
• Guide security exception processes and risk treatment decisions.
• Oversee Security Awareness program lifecycle and effectiveness.
• Support Governance, Risk, and Compliance (GRC) technology workflows.

Skills

Information Security

Risk assessment

Vendor security

GRC familiarity

Client-facing security

Access control

Security policies

Education

Bachelor's degree

Tools

GRC platforms

SIEM

Vulnerability management tools

Job description

*We are unable to provide sponsorship for this role*

Qualifications

• Bachelor's degree and 4+ years of Information Security experience
• Strong working knowledge of security frameworks and standards such as ISO 27001, National Institute of Standards and Technology (NIST), System and Organization Controls (SOC), and Standardized Information Gathering (SIG)
• Experience leading risk assessments, vendor security reviews, and client-facing security discussions with professionalism and tact.
• Familiarity with GRC platforms, role-based access controls, and a broad range of security technologies and tools.
• Working knowledge of areas such as authentication, encryption, firewalls, SIEM, intrusion detection/prevention, vulnerability management, mobile security, and privileged access management.

Responsibilities

• Lead responses to client security assessments, questionnaires, and audits, documenting evidence and performing risk assessments as needed.
• Create, maintain, and evolve security policies, standards, guidelines, and support documentation through strong technical writing.
• Manage and support processes that ensure Information Technology (IT) systems meet cybersecurity, risk, and compliance requirements.
• Serve as an Information Security subject matter expert, advising technical and non-technical stakeholders across the organization.
• Manage the third-party Security Vendor Risk Management program, including assessments, remediation tracking, and lifecycle oversight.
• Oversee the security exception request process and provide guidance on appropriate risk treatment decisions.
• Manage the full lifecycle of the Security Awareness program, including roadmap development, training evaluation, and effectiveness measurement.
• Support and optimize Governance, Risk, and Compliance (GRC) technology platforms and associated workflows.
• Conduct evaluations of IT programs and components to confirm alignment with published security standards and frameworks.