Senior GRC & Security Compliance Lead (Remote)

Shift Technology; Boston (MA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Flexible remote and hybrid options

Generous PTO and paid holidays

Mental health benefits

Learning and development opportunities

MAD Days per year (Make A Difference)

Job summary

Shift Technology is seeking a Senior GRC Analyst to strengthen its security and privacy program. You will manage compliance with major standards, drive risk assessments, and lead third‑party assurance efforts while supporting customer questions and due diligence.

The role reports to the GRC Lead, with responsibilities spanning governance, risk management, and audits in a fast‑moving SaaS environment. A focus on regulated industries is a plus.

Qualifications

• 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role.
• Bachelor’s Degree in a relevant field or equivalent work experience.
• Professional certifications such as CIPP/E, CIPP/US, CIPT, CISA, CISM, CRISC, or CISSP are highly desirable.

Responsibilities

• Develop, maintain, and assess Shift's integrated security and privacy management framework.
• Manage compliance with key industry standards and lead risk assessments.
• Oversee third-party security assurance and DPIA support for new products and initiatives.
• Coordinate internal and external audits for ISO 27001 and SOC 2 Type II.
• Support data subject requests and remediation of audit findings.

Skills

GRC experience

IT Audit

Security Assurance

Information Security

Regulatory knowledge

Cloud/GRC tools

Education

Bachelor's Degree in a relevant field

Tools

Drata

Job description

Shift Technology is seeking a Senior GRC Analyst to strengthen its security and privacy program. You will manage compliance with major standards, drive risk assessments, and lead third‑party assurance efforts while supporting customer questions and due diligence.

The role reports to the GRC Lead, with responsibilities spanning governance, risk management, and audits in a fast‑moving SaaS environment. A focus on regulated industries is a plus.