Senior GRC Security Analyst

Clear Capital; Reno (NV); Sur place; USD 114 000 - 139 000; Plein temps

Avantages offerts par ce poste

Profit-sharing bonus program

Communication stipends

Referral bonuses

Medical, dental, vision insurance

401(k) with employer match

Paid time off and holidays

Résumé du poste

Clear Capital is seeking a GRC Security Analyst to ensure compliance with security standards in the mortgage lending and appraisal industries. The role requires independent work, audit coordination, and risk assessment to advise internal and external partners.

We expect 5+ years in GRC/security/compliance, strong knowledge of NIST, ISO, GLBA, GDPR, CCPA, and certifications such as CISSP/CISM/CISA. Competitive salary, benefits, and a mission-driven environment.

Qualifications

• 5+ years in GRC, security/compliance, or risk mgmt with a degree.
• Expert knowledge of NIST CSF, RMF, ISO 27001/27002, SOC 2, ISO 42001; GLBA, GDPR, CCPA.

Responsabilités

• Monitor and enforce compliance with NIST CSF, RMF, ISO 27001/27002, SOC 2, and GLBA/CCPA/GDPR.
• Conduct risk assessments to identify vulnerabilities and evaluate controls.
• Develop and update security policies and procedures.
• Lead preparation for internal and external security audits.
• Collaborate with teams to remediate security gaps.
• Assess third-party vendor security and contractual controls.
• Maintain records and produce reports for management and regulators.
• Define qualitative and quantitative metrics for program effectiveness.
• Stay current on threats and regulatory changes.

Connaissances

GRC expertise

Security compliance

Audit coordination

Stakeholder communication

Regulatory understanding

Formation

Bachelor’s degree in related field

Master’s degree in related field

Outils

Vanta

Drata

OneTrust

Risk assessment tools

Description du poste

Clear Capital is seeking a GRC Security Analyst to ensure compliance with security standards in the mortgage lending and appraisal industries. The role requires independent work, audit coordination, and risk assessment to advise internal and external partners.

We expect 5+ years in GRC/security/compliance, strong knowledge of NIST, ISO, GLBA, GDPR, CCPA, and certifications such as CISSP/CISM/CISA. Competitive salary, benefits, and a mission-driven environment.