Senior GRC Analyst — Remote Risk Leader

DriveTime; Tempe (AZ); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Work From Home

Medical, dental, and vision

401(K)

Company paid life insurance

Short and long-term disability

Tuition Reimbursement

Wellness Program

Gratitude is Green

Paid Time Off

Job summary

DriveTime Family of Brands is seeking a Senior GRC Analyst to lead complex cybersecurity risk assessments across applications, infrastructure, cloud, identity, and data processes. You will develop standardized assessment methodologies, guide risk treatment decisions, and support audits and third-party assessments.

This role blends technical risk expertise with business acumen to influence stakeholders. You will mentor other GRC professionals, drive policy governance, and coordinate responses to

Qualifications

• Strong technical understanding of cybersecurity risks, threats, and controls.
• Ability to independently assess risks and identify treatment strategies.
• Experience supporting governance, risk, and compliance initiatives.

Responsibilities

• Lead complex information security risk assessments across applications, infrastructure, cloud, identity, data and business processes.
• Develop and standardize risk assessment methodologies, scoring models, and reporting processes.
• Lead GRC services including policy governance, audits, and third-party assessments.
• Provide risk management leadership, quality reviews, and mentorship to analysts.
• Assess security findings and develop actionable treatment recommendations.
• Evaluate business impacts and prepare remediation recommendations for management.
• Coordinate responses to due diligence, customer security reviews, and external assessments.
• Support and improve information security policy governance and awareness initiatives.

Skills

Threat identification

Control evaluation

Risk scoring

Documentation

Reporting

Policy governance

Audit support

Third-party security assessments

Mentoring

Stakeholder influence

Risk treatment

Education

Bachelor's degree in Cybersecurity, IT, IS, CS, Risk Management

Tools

GRC platforms

Risk management technologies

Job description

DriveTime Family of Brands is seeking a Senior GRC Analyst to lead complex cybersecurity risk assessments across applications, infrastructure, cloud, identity, and data processes. You will develop standardized assessment methodologies, guide risk treatment decisions, and support audits and third-party assessments.

This role blends technical risk expertise with business acumen to influence stakeholders. You will mentor other GRC professionals, drive policy governance, and coordinate responses to