Senior GRC Analyst: Risk, Compliance & Governance

DriveTime; United States; Remote; USD 100,000 - 170,000; Full time

Job summary

DriveTime is seeking a seasoned Sr. GRC Analyst to lead Information Security risk assessments and governance across our organization. You will translate technical findings into clear business risks and drive practical risk reduction with cross‑functional teams.

Responsibilities include compliance monitoring, policy governance, audits, due diligence, and security awareness. Candidates will hold a related bachelor’s degree and 4+ years in GRC or cybersecurity roles.

Qualifications

• Experience conducting risk assessments, documenting findings, and recommending remediation actions.
• Ability to translate technical findings into business risk statements and practical guidance.
• Bachelor’s degree or equivalent combination of education and experience in a related field.

Responsibilities

• Lead Information Security risk assessments and cyber risk management activities.
• Monitor compliance with policies, standards, frameworks, and regulatory requirements.
• Support policy governance, audits, third-party security assessments, and awareness programs.
• Provide risk guidance, reporting, and process-improvement recommendations.
• Coordinate evidence collection for internal and external audits and remediation efforts.
• Assess third‑party vendors and address identified risks in collaboration with business partners.

Skills

Cybersecurity risk management

Governance

Security controls

Compliance methodologies

Communication

Analytical thinking

Problem solving

Education

Bachelor's degree in Information Security/Cybersecurity/IT/Business/Audit

Job description

DriveTime is seeking a seasoned Sr. GRC Analyst to lead Information Security risk assessments and governance across our organization. You will translate technical findings into clear business risks and drive practical risk reduction with cross‑functional teams.

Responsibilities include compliance monitoring, policy governance, audits, due diligence, and security awareness. Candidates will hold a related bachelor’s degree and 4+ years in GRC or cybersecurity roles.