Senior GRC Analyst — Security & Compliance Leader

Peregrine Technologies; United States; On-site; USD 150,000 - 165,000; Full time

Job summary

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen and scale our security and compliance program. You will develop and maintain frameworks to meet regulatory, contractual, and operational standards across data protection, privacy, and security.

You’ll collaborate with engineering, product, and leadership to maintain compliance with SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand markets and government sectors.

Qualifications

• 7–10 years of experience in information security, compliance, or risk management within regulated industries.
• Working knowledge of SOC 2, HIPAA, CJIS, FedRAMP, ISO 27001, NIST 800-53, or similar frameworks.
• Understanding of cloud-native SaaS environments, microservices, VPCs/VPNs, and identity concepts such as RBAC and MFA.
• Detail-oriented with strong documentation and audit-tracking
• Ability to translate complex security concepts to diverse audiences.

Responsibilities

• Support implementation, tracking, and continuous improvement of compliance frameworks (SOC 2, CJIS, HIPAA, ISO 27001, GDPR, FedRAMP, NIST 800-53).
• Manage compliance documentation, internal audits, and evidence collection for stakeholders.
• Collaborate with teams to update policies, procedures, and controls related to data protection, access management, and incident response.
• Maintain awareness of security best practices in cloud environments like AWS (GuardDuty, SecurityHub, Inspector, AWS Config).
• Use compliance tools (Vanta, Drata, SecureFrame, HyperProof) to streamline reporting and evidence collection.
• Partner with technical teams to ensure IAM, MFA, and least-privilege are applied correctly.
• Contribute to audit readiness and respond to customer/vendor compliance inquiries.
• Be based in one of our hubs with a 4-day in-office requirement.

Skills

Security governance & compliance

SOC 2 knowledge

Regulatory frameworks

Cloud-native SaaS & microservices

IAM / RBAC / MFA

Documentation management

Audit readiness

Cross-functional collaboration

Clear communication

Tools

Vanta

Drata

SecureFrame

HyperProof

GuardDuty

SecurityHub

Amazon Inspector

AWS Config

Job description

Peregrine Technologies is seeking a Governance, Risk, and Compliance (GRC) Analyst to strengthen and scale our security and compliance program. You will develop and maintain frameworks to meet regulatory, contractual, and operational standards across data protection, privacy, and security.

You’ll collaborate with engineering, product, and leadership to maintain compliance with SOC 2, CJIS, HIPAA, ISO 27001, GDPR, NIST 800-53, and FedRAMP as we expand markets and government sectors.