Senior GRC Lead: Cyber Essentials Plus

Procore Technologies, Inc.; Austin (TX); On-site; USD 163,000 - 224,000; Full time

Job summary

Procore Technologies is seeking a Senior Staff GRC Analyst to own the Cyber Essentials program from end to end, working with IT, Security Engineering and a certification body to keep controls audit-ready year-round. You will lead scope, validation, and remediation for UK and other customers, reporting to the Senior Manager, GRC.

Based in our Austin office, this role requires 7+ years in IT audit or security compliance, hands-on testing of endpoint and cloud controls (Intune, Okta, AWS), and

Qualifications

• 7+ years in IT audit, GRC, security compliance, or security consulting with end-to-end ownership of Cyber Essentials or Cyber Essentials Plus certifications.
• Hands-on knowledge of endpoint and cloud security controls, with testing in Intune, Okta, AWS.
• Familiarity with ISO 27001, SOC 2, or NIST CSF to connect Cyber Essentials to the control environment.
• Proven ability to lead through influence, driving action across IT, Security, and business teams.
• Experience planning and delivering compliance programs against external deadlines.

Responsibilities

• Own the annual Cyber Essentials Plus certification cycle end to end.
• Define and maintain the certification scope across devices, networks, cloud services, and user accounts.
• Validate the five technical controls (firewalls, secure configuration, user access control, malware protection, and security update management).
• Drive remediation of control gaps with owners and track fixes to deadlines.
• Serve as the primary contact for the certification body and coordinate assessments.
• Align Cyber Essentials with ISO 27001 and SOC 2 to reduce duplicate testing.
• Improve the program via automation and cleaner evidence processes.
• Report status, risks, and readiness to leadership.

Skills

IT audit

GRC

Security compliance

End-to-end program ownership

Influence without authority

Cloud security controls

ISO 27001 familiarity

SOC 2 familiarity

NIST CSF familiarity

Endpoint security

Education

Bachelor's degree in IT/CS/Cybersecurity

CISA certification

CISM certification

CISSP certification

ISO 27001 Lead Auditor

Tools

Intune

Okta

AWS

Job description

Procore Technologies is seeking a Senior Staff GRC Analyst to own the Cyber Essentials program from end to end, working with IT, Security Engineering and a certification body to keep controls audit-ready year-round. You will lead scope, validation, and remediation for UK and other customers, reporting to the Senior Manager, GRC.

Based in our Austin office, this role requires 7+ years in IT audit or security compliance, hands-on testing of endpoint and cloud controls (Intune, Okta, AWS), and