Senior GRC & Cyber Essentials Lead

Procore Technologies; Austin (TX); On-site; USD 163,000 - 224,000; Full time

Benefits offered by this job

Equity compensation

Bonus incentive

Job summary

Procore Technologies is seeking a Senior Staff GRC Analyst to own the Cyber Essentials Plus program end to end from Austin. You will work with IT, Security Engineering, and our certification body to keep controls audit-ready year-round and protect customer data, with UK public sector and enterprise focus.

You will validate five technical controls hands-on and drive remediation, align CE with ISO 27001/SOC 2, and lead automation initiatives to improve efficiency while reporting status to

Qualifications

• 7+ years of IT audit, GRC, security compliance experience with end-to-end ownership of Cyber Essentials or Cyber Essentials Plus certifications.
• Hands-on knowledge of endpoint and cloud security controls such as patch management, device configuration, and identity and access management, with experience validating them in tools like Intune, Okta, AWS.
• Familiarity with ISO 27001, SOC 2, or NIST CSF to connect Cyber Essentials to the rest of our control environment.
• Proven ability to lead through influence across IT, Security, and business teams.
• Track record of planning and delivering compliance programs against external deadlines.
• Proficiency with GRC platforms for evidence collection and control tracking; interest in automating manual work.
• Willingness to mentor other GRC analysts; degree or equivalent; certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor are a plus.

Responsibilities

• Own the Cyber Essentials Plus certification cycle end to end, from scoping to renewal.
• Define and maintain certification scope across devices, networks, cloud services, and user accounts.
• Validate five technical controls hands-on (firewalls, secure configuration, IAM, malware protection, patching).
• Drive remediation of control gaps and track fixes to closure before deadlines.
• Serve as primary contact for the certification body and coordinate assessments.
• Align Cyber Essentials with ISO 27001 and SOC 2 to reduce duplicate testing.
• Improve the program through automation and continuous control monitoring.
• Report program status and risks to leadership and escalate when needed.

Skills

GRC ownership

Endpoint security

IAM testing

ISO 27001 familiarity

Education

Degree in IT/CS/Cybersecurity

Tools

Intune

Okta

AWS

Job description

Procore Technologies is seeking a Senior Staff GRC Analyst to own the Cyber Essentials Plus program end to end from Austin. You will work with IT, Security Engineering, and our certification body to keep controls audit-ready year-round and protect customer data, with UK public sector and enterprise focus.

You will validate five technical controls hands-on and drive remediation, align CE with ISO 27001/SOC 2, and lead automation initiatives to improve efficiency while reporting status to