Senior GRC Security Analyst II — Audit & Controls (Remote)

jda; Dallas (TX); Remote; USD 130,000 - 164,000; Full time

Benefits offered by this job

Comprehensive benefits

401K with matching

Flexible time off

Corporate fitness program

Voluntary benefits

Job summary

Blue Yonder is seeking a Staff Security Analyst II, GRC to join its global cybersecurity team. This role coordinates IT and security controls, conducts risk assessments, and supports audits across product and internal processes.

You will work with cross-functional teams to implement and monitor controls in a regulated environment. The ideal candidate has 7+ years in security compliance or IT audit, strong communication, and experience with ISO 27001/SOC frameworks, cloud security, and AI

Qualifications

• Minimum 7 years of experience in information security compliance, GRC or IT audit roles.
• Experience applying IT and security control frameworks (ISO 27001, SOC 1/2), including testing, remediation and tracking.
• Familiarity with cloud security practices and shared responsibility model.
• Hands-on experience with AI Governance and ISO 42001.
• Excellent communication and stakeholder management skills.
• Strong analytical and problem-solving skills.

Responsibilities

• Lead internal IT and security control assessments aligned with industry standards (ISO 27001/27701/22301, SOC1/2 Type II).
• Identify control deficiencies and drive remediation activities with stakeholders.
• Support evidence collection and documentation of controls for audits.
• Regularly communicate compliance posture to stakeholders and leadership.
• Stay current with regulatory and security standards and frameworks.
• Train and prepare control owners for audit participation and evidence collection.
• Plan, coordinate and manage internal and external audit activities including schedules and scope.
• Manage report reviews, respond to audit findings, and track remediation to closure.

Skills

Communication

Analytical thinking

Stakeholder management

Cloud security

Education

Bachelor’s degree in Information Systems, Cybersecurity, Business or related field

Certifications: CISA, CISM, or CISSP (preferred)

Job description

Blue Yonder is seeking a Staff Security Analyst II, GRC to join its global cybersecurity team. This role coordinates IT and security controls, conducts risk assessments, and supports audits across product and internal processes.

You will work with cross-functional teams to implement and monitor controls in a regulated environment. The ideal candidate has 7+ years in security compliance or IT audit, strong communication, and experience with ISO 27001/SOC frameworks, cloud security, and AI