Senior GRC Analyst — Security, Privacy & AI Governance

DeepCamp; Orem (UT); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

401k

Generous PTO

Job summary

RainFocus is seeking a Senior Governance, Risk, and Compliance Analyst to own and grow our GRC program. You will report to the CISO and drive control maturity, risk assessments, and audit readiness across SOC 2, ISO 27001, PCI DSS, and other frameworks.

You’ll partner with Engineering and Security to mature vulnerability management and DLP, while shaping AI governance and shadow IT visibility. You will lead policy updates, respond to client inquiries, and present progress on remediation and

Qualifications

• 6+ years of proven experience in GRC, IT audit, information security compliance, or a related field.
• In-depth knowledge of SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and other standards.
• Experience running formal risk assessments and working with audits is essential.

Responsibilities

• Lead the GRC program across SOC 2, ISO 27001, PCI DSS and other client frameworks, including audit prep and evidence collection.
• Manage and mature the control framework and map new regulations.
• Conduct annual security risk assessments using NIST SP 800-30 methodology and track residual risk.

Skills

GRC experience

IT audit

InfoSec compliance

Risk assessments

Stakeholder mgmt

Security reporting

Education

Bachelor's degree in Technology, Cybersecurity, or related field

Tools

Drata

OneTrust

Vanta

Job description

RainFocus is seeking a Senior Governance, Risk, and Compliance Analyst to own and grow our GRC program. You will report to the CISO and drive control maturity, risk assessments, and audit readiness across SOC 2, ISO 27001, PCI DSS, and other frameworks.

You’ll partner with Engineering and Security to mature vulnerability management and DLP, while shaping AI governance and shadow IT visibility. You will lead policy updates, respond to client inquiries, and present progress on remediation and