Senior Information Security GRC Analyst - Remote

ChargePoint; United States; Remote; USD 110,000 - 140,000; Full time

Job summary

ChargePoint is seeking a Senior Analyst, Information Security Risk and Compliance to enhance ITGCs, automate governance, risk and compliance processes and maintain SOX, FedRAMP, PCI compliance. The role focuses on coordinating with internal and external auditors, improving control execution, and driving an audit-ready culture across IT systems.

The ideal candidate has extensive experience in IT controls within SAAS environments, strong communication skills, and a proactive, risk-based mindset to

Qualifications

• Bachelor’s degree in General Business, Information Systems, Engineering, Science or a related field with minimum 5 years’ relevant experience.
• 8+ years of internal controls and risk management experience including ITGC SOX, SOC 1/2/3, or IT Internal Audit activities.
• Good knowledge of Sarbanes-Oxley, NIST 800-53, FedRAMP, ISO 27001, NIST CSF.
• Solution-oriented mindset with risk-based approach to identifying and addressing compliance risks.
• Experience working with internal and external auditors.
• Familiarity with SAAS-based applications (NetSuite, Workday, Salesforce, Github) and cloud providers (AWS, Google Cloud).
• Strong written and verbal communication skills and ability to influence stakeholders.
• Excellent organizational skills.

Responsibilities

• Enhance ITGCs and automate processes for efficient GRC program.
• Maintain compliance with SOX, FedRAMP, PCI and other standards.
• Continue building the GRC program with innovation and streamlined compliance efforts.
• Provide leadership to internal functions in access management, change management, and operational procedures.
• Collaborate with auditors and control owners to ensure audit-readiness and effective controls.
• Build reporting to track GRC and security project status for monthly/quarterly reviews.

Job description

ChargePoint is seeking a Senior Analyst, Information Security Risk and Compliance to enhance ITGCs, automate governance, risk and compliance processes and maintain SOX, FedRAMP, PCI compliance. The role focuses on coordinating with internal and external auditors, improving control execution, and driving an audit-ready culture across IT systems.

The ideal candidate has extensive experience in IT controls within SAAS environments, strong communication skills, and a proactive, risk-based mindset to