Senior GRC & Cyber Essentials Lead

DroneDeploy, Inc.; Austin (TX); On-site; USD 163,000 - 224,000; Full time

Benefits offered by this job

Equity eligibility

Bonus eligibility

Job summary

Procore Technologies in Austin seeks a Senior Staff GRC Analyst to own Cyber Essentials and Cyber Essentials Plus programs end-to-end, including scope, self-assessment, and renewal. You will partner with IT, Security, and our certification body to keep controls audit-ready for UK public sector and enterprise customers.

You will report to the Senior Manager, GRC and help align Cyber Essentials with ISO 27001 and SOC 2, driving automation and cleaner evidence processes while mentoring junior

Qualifications

• 7+ years of IT audit, GRC, security compliance experience with end-to-end ownership of cybersecurity certifications.
• Hands-on knowledge of endpoint and cloud security controls, including patch management and IAM.
• Familiarity with ISO 27001, SOC 2, or NIST CSF to connect Cyber Essentials to the control environment.
• Proven ability to lead through influence and deliver compliance programs against external deadlines.
• Experience with GRC platforms for evidence collection and control tracking.

Responsibilities

• Own the Cyber Essentials and Cyber Essentials Plus certification cycle end to end.
• Define and maintain certification scope across devices, networks, cloud services, and users.
• Validate controls hands-on and coordinate with IT and Security teams.
• Drive remediation of control gaps with owners and track fixes to deadlines.
• Serve as primary contact for the certification body and manage assessments and evidence requests.
• Align Cyber Essentials with ISO 27001 and SOC 2 to reduce duplicate testing.
• Improve the program through automation and cleaner evidence processes.
• Report status, risks, and readiness to leadership and escalate when needed.

Skills

IT audit

GRC

security compliance

vendor coordination

Education

Degree in IT or cybersecurity

Tools

Intune

Okta

AWS

Job description

Procore Technologies in Austin seeks a Senior Staff GRC Analyst to own Cyber Essentials and Cyber Essentials Plus programs end-to-end, including scope, self-assessment, and renewal. You will partner with IT, Security, and our certification body to keep controls audit-ready for UK public sector and enterprise customers.

You will report to the Senior Manager, GRC and help align Cyber Essentials with ISO 27001 and SOC 2, driving automation and cleaner evidence processes while mentoring junior