Senior GRC Analyst

Ladders; United States; Remote; USD 115,000 - 159,000; Full time

Benefits offered by this job

Full-time remote work

Cross-functional collaboration

Continuous improvement initiatives

Exposure to regulatory standards

Job summary

Ladders is seeking a Senior GRC Analyst to join a leader in Enterprise Technology. This role will own key elements of the organization's governance, risk, and compliance program with a strong focus on security assurance and regulatory readiness.

You will collaborate with security, tech, and audit teams to translate requirements into practical controls, support audits, and strengthen control frameworks across the business.

Qualifications

• 5–7 years of experience in governance, risk, and compliance (GRC) roles.
• Hands-on experience with ISO 27001 and SOC 2 audits.
• Strong understanding of risk management principles.
• Experience with security controls in corporate and cloud environments.
• Familiarity with third-party risk management processes.
• Excellent communication skills to translate technical requirements.
• CISM or CISSP certification is a plus.

Responsibilities

• Own key components of the global GRC program, ensuring compliance with ISO 27001 and SOC 2
• Lead enterprise and product-level risk assessments with stakeholders
• Support external audits, including evidence collection and auditor coordination
• Develop and maintain security policies and procedures
• Perform assurance activities to validate control effectiveness
• Manage the third-party risk management program, including supplier assessments
• Track compliance metrics and report on audit findings and remediation progress
• Collaborate with various teams to embed security and compliance into processes

Skills

GRC experience

ISO 27001

SOC 2

Risk management

Security controls

Third-party risk

Communication skills

CISM/CISSP

Job description

For our client, we are seeking a Senior GRC Analyst to join the team of a leader in the Enterprise Technology space. This role will own key elements of the organization’s governance, risk, and compliance program with a strong focus on security assurance and regulatory readiness. The ideal candidate will help strengthen control frameworks, support enterprise and product-level risk activities, and ensure compliance efforts scale effectively across the business. This position partners closely with security, technology, audit, and cross-functional stakeholders to translate requirements into practical controls and measurable outcomes.

Location: Remote

Compensation: $115,000 – $159,000 annually

Responsibilities

• Own key components of the global GRC program, ensuring compliance with ISO 27001 and SOC 2
• Lead enterprise and product-level risk assessments with stakeholders
• Support external audits, including evidence collection and auditor coordination
• Develop and maintain security policies and procedures
• Perform assurance activities to validate control effectiveness
• Manage the third-party risk management program, including supplier assessments
• Track compliance metrics and report on audit findings and remediation progress
• Collaborate with various teams to embed security and compliance into processes

Qualifications

• 5–7 years of experience in governance, risk, and compliance (GRC) roles
• Hands-on experience with ISO 27001 and SOC 2 audits
• Strong understanding of risk management principles
• Experience with security controls in corporate and cloud environments
• Familiarity with third-party risk management processes
• Excellent communication skills for translating technical requirements
• CISM or CISSP certification is a plus

Benefits

• Full-time remote work opportunity
• Collaboration with cross-functional teams
• Engagement in continuous improvement initiatives
• Opportunity to enhance security and compliance frameworks
• Exposure to a variety of regulatory requirements and standards

Our client is an equal opportunity employer. We encourage you to apply even if you don’t meet every qualification—your background could be exactly what this team needs.