Senior GRC Analyst: AI, Security & Compliance Lead

Embedded Shishya; Orem (UT); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

401k

Generous PTO

Job summary

RainFocus is hiring a Senior GRC Analyst to own and grow the company’s governance, risk, and compliance program. You will report to the CISO and drive program maturity, not just maintenance, across multiple frameworks.

You will lead risk assessments, update security policies, and partner with Engineering to advance vulnerability management and DLP initiatives while supporting audits and client inquiries.

Qualifications

• Bachelor's degree in Technology, Cybersecurity or related field.
• 6+ years of experience in GRC, IT audit, information security compliance, or related field.
• Knowledge of SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR.

Responsibilities

• Lead and mature RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other frameworks.
• Own annual security risk assessment process (NIST SP 800-30).
• Maintain security policies, standards, and documentation.
• Partner with Engineering to mature vulnerability management and secrets-scanning practices.
• Grow and operationalize a Data Loss Prevention (DLP) program.
• Drive AI governance policy, tooling, and monitoring.

Skills

GRC program leadership

SOC 2

ISO 27001

PCI DSS

NIST SP 800-30

Audit management

Policy development

Risk assessment

Regulatory compliance

Stakeholder communication

Education

Bachelor's degree in Technology, Cybersecurity

Tools

Drata

OneTrust

Vanta

Job description

RainFocus is hiring a Senior GRC Analyst to own and grow the company’s governance, risk, and compliance program. You will report to the CISO and drive program maturity, not just maintenance, across multiple frameworks.

You will lead risk assessments, update security policies, and partner with Engineering to advance vulnerability management and DLP initiatives while supporting audits and client inquiries.