Senior GRC Security Analyst (Remote)

DriveTime; Tempe (AZ); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Work From Home

Health Insurance

401K

Tuition Reimbursement

Wellness Program

Paid Time Off

Life Insurance

Job summary

DriveTime is seeking a Senior GRC Analyst to lead complex cybersecurity risk assessments across applications, infrastructure, cloud, identity, data, and processes. You will develop standardized methodologies, guide risk treatment decisions, and mentor other GRC professionals in a fast-paced environment.

You’ll collaborate with Legal, Compliance, and Technology teams to strengthen the risk program, manage third-party assessments, and support audits with a strong business risk focus.

Qualifications

• 7+ years in Information Security, cybersecurity risk management or related fields.
• 3+ years independently leading technical cybersecurity risk assessments.
• Experience evaluating security controls across apps, infra, cloud, identity, data and processes.
• Proven ability to craft risk statements and provide actionable remediation guidance.
• Knowledge of CSF and NIST risk assessment frameworks.

Responsibilities

• Lead complex information security risk assessments across multiple domains and report results.
• Develop and standardize risk assessment methodologies and scoring models.
• Oversee compliance monitoring, policy governance, and audit support activities.
• Provide technical risk leadership, conduct quality reviews, and mentor teammates.
• Assess findings and propose clear risk statements and remediation actions.
• Evaluate business impact and advise on risk acceptance or remediation decisions.
• Coordinate third-party security assessments with cross-functional teams.
• Draft responses to due diligence questionnaires and customer security reviews.
• Support policy governance and information security awareness initiatives.

Skills

Cybersecurity risk management

Information security

Threat identification

Control evaluation

Risk scoring

Policy governance

Audit support

Vendor management

Due diligence

Reporting

Education

Bachelor’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, or a related field

Tools

GRC platforms

Job description

DriveTime is seeking a Senior GRC Analyst to lead complex cybersecurity risk assessments across applications, infrastructure, cloud, identity, data, and processes. You will develop standardized methodologies, guide risk treatment decisions, and mentor other GRC professionals in a fast-paced environment.

You’ll collaborate with Legal, Compliance, and Technology teams to strengthen the risk program, manage third-party assessments, and support audits with a strong business risk focus.