Senior GRC & Security Leader - Remote

RainFocus; Orem (UT); Remote; USD 120,000 - 160,000; Full time

Job summary

RainFocus, a leading software company, is seeking a Senior GRC Analyst to own and grow its governance, risk, and compliance program, reporting to the CISO. You will manage controls, lead risk assessments, support audits, and drive maturity across SOC 2, ISO 27001, PCI DSS, and other frameworks.

You will partner with Engineering and Security, advance vulnerability management, DLP, AI governance, and security training.

Qualifications

• Bachelor's degree in Technology, Cybersecurity, or related field.
• 6+ years of experience in GRC, IT audit, information security compliance, or related field.
• In-depth knowledge of regulatory standards (SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR).
• Experience leading formal risk assessments (NIST SP 800-30).
• Certifications such as CISA, CRISC, CISSP, CIPP, or CIPM desirable.
• Familiarity with security tooling (Drata, OneTrust, Vanta).

Responsibilities

• Lead and mature RainFocus's GRC program across multiple frameworks (SOC 2, ISO 27001, PCI DSS).
• Manage control framework, map regulations, and conduct gap assessments.
• Own annual security risk assessments with stakeholder interviews and risk scoring.
• Maintain security policies and documentation to meet best practices.
• Partner with Engineering to mature vulnerability management and secrets-scanning.
• Develop and operationalize a Data Loss Prevention program across email, endpoints, and cloud storage.
• Grow RainFocus's security awareness training program and AI governance efforts.
• Collaborate with cross-functional teams to implement risk management and ensure compliance.
• Respond to security/privacy inquiries and present status reports.

Skills

GRC program management

Audit coordination

Regulatory frameworks

Risk assessment

Cloud security

GRC tooling

Professional certifications

Education

Bachelor's degree in Technology/Cybersecurity

Tools

Drata

OneTrust

Vanta

Job description

RainFocus, a leading software company, is seeking a Senior GRC Analyst to own and grow its governance, risk, and compliance program, reporting to the CISO. You will manage controls, lead risk assessments, support audits, and drive maturity across SOC 2, ISO 27001, PCI DSS, and other frameworks.

You will partner with Engineering and Security, advance vulnerability management, DLP, AI governance, and security training.