Senior Security GRC Analyst — AI-Driven Risk & Policy

Yahoo Holdings Inc.; Champaign (IL); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work

Healthcare

401k

Education stipends

Backup childcare

Job summary

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join The Paranoids security team. You will evaluate security risks, manage exception lifecycles, and assess risk across Yahoo properties, partnering with leaders, engineers, and security colleagues.

Responsibilities include drafting security policies, socializing standards, and applying AI-enabled workflows to streamline reviews, all while aligning risk with business context and oversight to support informed decisions.

Qualifications

• 5+ years of experience in security governance, risk management, compliance, or a related information security discipline.
• Demonstrated experience communicating actionable findings to senior leadership and engineering teams.
• Strong written and verbal communication skills with executive memo writing experience.
• Working knowledge of security frameworks (NIST CSF, ISO 27001, FAIR) and cloud infrastructure.
• Experience developing or managing security policies, standards, or governance programs.
• Experience using generative AI tools to accelerate documentation and risk analyses.
• Understanding of regulatory frameworks (SOC 2, PCI DSS, GDPR).
• Proven track record of improving risk assessment or policy programs.

Responsibilities

• Evaluate and document known security risks for executive review with actionable treatment options.
• Manage end-to-end lifecycle of risk exceptions from intake to reassessment.
• Conduct risk assessments against Paranoids policies and industry frameworks.
• Draft, revise, and maintain security policies and standards.
• Socialize new or updated standards with stakeholders before publication.
• Translate technical security concepts for non-technical stakeholders.
• Identify and implement AI-assisted workflows to streamline reviews.

Skills

Security governance

Risk management

Compliance

Executive communication

AI governance

Education

CRISC

CISSP

CISA

CISM

Tools

ServiceNow GRC

Archer

Jira

Job description

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join The Paranoids security team. You will evaluate security risks, manage exception lifecycles, and assess risk across Yahoo properties, partnering with leaders, engineers, and security colleagues.

Responsibilities include drafting security policies, socializing standards, and applying AI-enabled workflows to streamline reviews, all while aligning risk with business context and oversight to support informed decisions.