Senior GRC Analyst — Remote Cyber Risk & Compliance

DriveTime; Tempe (AZ); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Work From Home

Medical, dental, and vision

401(K)

Tuition Reimbursement

Wellness Program

Gratitude is Green

Paid Time Off

Job summary

DriveTime Family of Brands is seeking a Sr. GRC Analyst to join our team in Tempe, AZ. You will lead governance, risk, and compliance activities, translating security findings into business risk and driving practical solutions to strengthen our security posture.

As a trusted advisor across business units, you will manage risk assessments, compliance monitoring, policy governance, and third‑party assessments, while mentoring junior analysts and promoting consistent GRC practices.

Qualifications

• 4+ years of experience in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or related discipline.
• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, Audit, or related field.
• Experience independently conducting risk assessments, evaluating controls, documenting findings, and developing remediation or risk treatment recommendations.
• Familiarity with the NIST CSF and information security risk and control concepts.
• Experience with third‑party risk management, security awareness programs, or audit/compliance programs in regulated environments.

Responsibilities

• Lead Information Security risk assessments and cyber risk management activities, including risk identification, analysis, scoring, treatment planning, documentation, tracking, and reporting.
• Perform Information Security compliance monitoring and control assessments against policies, standards, frameworks, contractual obligations, and regulatory requirements.
• Lead GRC services such as policy governance, audit support, third‑party security assessments, due diligence activities, and security awareness programs.
• Provide risk guidance, reporting, process improvement recommendations, and mentorship within GRC.
• Coordinate evidence collection for audits, interpret requests, and track remediation efforts.
• Conduct cybersecurity assessments of third‑party vendors and collaborate with partners to address identified risks.

Skills

Cyber risk mgmt

Governance

Security controls

Compliance assessment

Education

Bachelor's degree in Information Security

Job description

DriveTime Family of Brands is seeking a Sr. GRC Analyst to join our team in Tempe, AZ. You will lead governance, risk, and compliance activities, translating security findings into business risk and driving practical solutions to strengthen our security posture.

As a trusted advisor across business units, you will manage risk assessments, compliance monitoring, policy governance, and third‑party assessments, while mentoring junior analysts and promoting consistent GRC practices.