Senior GRC Analyst — Remote Risk & Compliance Leader

DriveTime Sales and Finance Company, LLC; United States; À distance; USD 120 000 - 150 000; Plein temps

Avantages offerts par ce poste

Work From Home

Medical, dental, and vision insurance

401(K)

Company paid life insurance

Short-term disability

Tuition Reimbursement

Wellness Program

Paid Time Off

Growth Opportunities

Résumé du poste

DriveTime Family of Brands is seeking a Sr. GRC Analyst to drive governance, risk, and compliance across the organization. You will translate security findings into business risk, mentor teammates, and partner with Legal, Compliance, and IT to strengthen controls.

The role emphasizes risk identification, assessment, reporting, and coordination of third‑party security reviews, audits, and awareness initiatives to protect customers and business operations.

Qualifications

• 4+ years in Information Security GRC or related discipline.
• Bachelor’s degree in Information Security, Cybersecurity, IT, Risk or related field.
• Experience conducting risk assessments and documenting remediation.
• Familiarity with CSF, risk concepts, and control evaluation.

Responsabilités

• Lead Information Security risk assessments and cyber risk management activities.
• Monitor compliance against policies, standards, frameworks, and regulatory requirements.
• Lead policy governance, audits, third‑party security reviews, and awareness programs.
• Provide risk guidance, reporting, and process improvements within GRC.
• Facilitate risk assessments and evaluate control effectiveness across tech and business.
• Develop clear risk statements and remediation recommendations for management.
• Support audits by coordinating evidence collection and remediation tracking.
• Assess third‑party security and respond to due diligence questions.

Connaissances

Cyber risk mgmt

Governance & compliance

Risk assessment

Stakeholder comms

Mentorship

Formation

Bachelor's degree in Information Security

Outils

NIST CSF

Audit tooling

Description du poste

DriveTime Family of Brands is seeking a Sr. GRC Analyst to drive governance, risk, and compliance across the organization. You will translate security findings into business risk, mentor teammates, and partner with Legal, Compliance, and IT to strengthen controls.

The role emphasizes risk identification, assessment, reporting, and coordination of third‑party security reviews, audits, and awareness initiatives to protect customers and business operations.