Senior GRC Analyst: Security Compliance & Audit Lead

Barracuda; Chelmsford (MA); Hybrid; USD 98,000 - 130,000; Full time

Benefits offered by this job

Equity

High-quality health benefits

Retirement Plan with employer match

Career-growth opportunities

Flexible Time Off and Paid Time Off

Job summary

Barracuda is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team. This role focuses on managing global security compliance programs, coordinating external audits, and maturing controls across IT and Product units.

You will drive structured, scalable, automated, data-driven processes, report to the Director of GRC, and collaborate with cross-functional teams.

Qualifications

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent.
• CompTIA Security+ or equivalent certification.
• Experience with ISO 27001 and NIST SP 500-53.
• 3+ years in Information Security, AI, or related roles.
• 0-1 years in development of Agentic AI use cases and LLMs.

Responsibilities

• Own and lead coordination of external audit cycles related to US Federal Security Compliance Programs and SLED programs, including CMMC and GovRAMP Core & Moderate.
• Lead and coordinate the implementation of security controls internally on in-scope applications as part of readiness activities.
• Lead gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess.
• Coordinate ongoing continuous monitoring obligations with external entities (eg monthly, quarterly).

Skills

Security governance

Audit coordination

Regulatory compliance

AI/Automation in security

Remediation leadership

Education

Bachelor's degree in Information Security / IT / Computer Science

Tools

ISO 27001

NIST SP 800-53

Job description

Barracuda is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team. This role focuses on managing global security compliance programs, coordinating external audits, and maturing controls across IT and Product units.

You will drive structured, scalable, automated, data-driven processes, report to the Director of GRC, and collaborate with cross-functional teams.