Senior Information Security GRC Analyst

OneTrust; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

OneTrust is seeking a Senior Information Security GRC Analyst to support IT and InfoSec through governance, risk, and compliance activities. You will manage high‑volume CAQ responses and rely on SOC reports, ISO certificates, and other evidence to demonstrate security posture.

You will collaborate with Sales, Security, Privacy, Legal, Compliance, and Product teams to validate responses, explain controls to customers, and help secure procurement while driving operational excellence.

Qualifications

• Experience handling CAQs, RFP security sections, and other assurance artifacts.
• Ability to leverage internal evidence repositories (SOC reports ISO certificates policies, etc.) to respond defensibly.
• Collaborate with Sales Marketing Customer Success Security Engineering Privacy Legal Compliance Product to validate responses and fill gaps.

Responsibilities

• Own end-to-end completion of CAQs, RFP security sections, and assurance artifacts.
• Provide accurate, consistent, defensible responses leveraging internal evidence repositories.
• Partner with internal stakeholders to validate responses and resolve gaps.
• Meet with customers to explain security controls, risk posture, and compliance commitments.
• Present security topics to both technical and non-technical audiences.
• Support Sales and Customer Success by addressing objections and enabling procurement cycles.
• Perform security reviews of contracts, DPAs, and customer security terms.
• Identify security requirements and risk areas; propose mitigations with Legal and Security leadership.
• Track contractual security commitments and ensure they are feasible and aligned with controls.
• Improve team efficiency.

Skills

Governance & Risk

Security Communications

Documentation & Evidence

Tools

SOC Reports

ISO Certificates

DPAs & Security Addenda

Job description

Strength in Trust OneTrust's mission is to enable innovation through the responsible use of data and AI. We believe that ensuring data is trusted shouldn't slow teams down it should accelerate what's possible. This led us to develop the first technology platform for responsible data use in 2016. Today with AI representing the latest and most impactful expansion of data yet OneTrust is once again redefining what responsible innovation looks like. OneTrust the AI-Ready Governance Platform unifies regulatory intelligence automation and connected governance workflows so businesses can continue to move at the speed of AI while ensuring good governance to prevent data misuse at scale. Trusted by thousands of organizations worldwide OneTrust is shaping the future where trusted data becomes a transformative force for business and society.

The Challenge

We are looking for a dynamic Senior Information Security GRC Analyst to support IT and InfoSec by performing various governance risk and compliance activities as part of the OneTrust InfoSec GRC team.

Your Mission

• Customer Security Assurance Questionnaires Own a strong high volume of end-to-end completion of strong customer security questionnaires (CAQs) RFP security sections and other assurance artifacts (e.g. SIG CAIQ custom questionnaires).
• Provide accurate consistent and defensible responses by leveraging internal evidence repositories (SOC reports ISO certificates policies standards diagrams pen test summaries etc.).
• Partner with internal stakeholders (Sales Marketing Customer Success Security Engineering Privacy Legal Compliance Product) to validate responses and resolve gaps.
• Customer Engagement Security Discussions Meet with customers and prospects to strong explain security controls risk posture and compliance commitments.
• Present security topics with confidence and clarity tailoring depth for technical and non-technical audiences.
• Support Sales and Customer Success by addressing security objections clarifying customer audit scope and enabling procurement cycles.
• Contract Security Review Perform security reviews of contracts DPAs security addenda and customer security terms.
• Identify security requirements non-standard obligations and risk areas propose mitigations and collaborate with Legal and Security leadership on negotiation positions.
• Track contractual security commitments and help ensure they are operationally feasible and aligned with control coverage.
• Operational Excellence Improve team efficiency