Senior GRC Analyst: Remote Risk & Compliance Leader

DriveTime Sales and Finance Company, LLC; Phoenix (AZ); Remote; USD 110,000 - 150,000; Full time

Benefits offered by this job

Work From Home

Job summary

DriveTime Family of Brands seeks a senior GRC Analyst to lead risk assessments, compliance monitoring, and policy governance. You will translate security findings into business risk and drive practical remediation across departments.

Requires 4+ years in Information Security GRC, a Bachelor's degree, and strong communication. Nice-to-haves include CISSP/CISA/CRISC/Security+ and familiarity with NIST CSF frameworks.

Qualifications

• 4+ years of experience in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or related discipline.
• Experience with risk assessments, control evaluations, and remediation planning.
• Ability to translate security findings into business risk and actionable guidance.

Responsibilities

• Lead Information Security risk assessments and cyber risk management activities.
• Perform compliance monitoring against policies, standards, frameworks, and regulatory requirements.
• Coordinate policy governance, audits, third-party assessments, and security awareness programs.

Skills

Cybersecurity risk management

Governance & policy

Compliance assessment

Risk reporting

Communication skills

Mentoring

Education

Bachelor’s degree in Information Security / Cybersecurity / IT / Business / Risk Management / Audit

Job description

DriveTime Family of Brands seeks a senior GRC Analyst to lead risk assessments, compliance monitoring, and policy governance. You will translate security findings into business risk and drive practical remediation across departments.

Requires 4+ years in Information Security GRC, a Bachelor's degree, and strong communication. Nice-to-haves include CISSP/CISA/CRISC/Security+ and familiarity with NIST CSF frameworks.