Senior GRC Security Analyst: Audit-Driven Compliance

Barracuda Networks; Ann Arbor (MI); On-site; USD 90,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Retirement plan with employer match

Career-growth opportunities

Flexible Time Off

Paid Time Off

Volunteer opportunities

Equity options

Job summary

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join its Information Security team in the United States. The role focuses on managing security compliance programs with a global reach, including annual externally-led audits and ongoing expansion of controls across Barracuda’s IT and Product units.

The ideal candidate will own external audit cycles for GovRAMP/CMMC and lead readiness activities while maturing automation and data-driven governance,

Qualifications

• 3+ years of experience in Information Security, AI, Automation or related roles.
• Experience driving remediation across technical teams and coordinating audits.
• Experience with GovRAMP and CMMC compliance programs using NIST SP 800-53.

Responsibilities

• Own and lead external audit cycles for US Federal Security Compliance and SLED programs.
• Coordinate implementation of security controls in in-scope applications during readiness activities.
• Lead gap analyses and modernize self-assessment processes.
• Coordinate continuous monitoring with external entities (monthly, quarterly).

Skills

InfoSec experience

AI/Automation

GRC coordination

Education

Bachelor’s degree in Information Security or IT/CS

Tools

NIST SP 800-53

ISO 27001

GovRAMP

CMMC

Job description

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to join its Information Security team in the United States. The role focuses on managing security compliance programs with a global reach, including annual externally-led audits and ongoing expansion of controls across Barracuda’s IT and Product units.

The ideal candidate will own external audit cycles for GovRAMP/CMMC and lead readiness activities while maturing automation and data-driven governance,