Senior Security GRC Analyst — Audit & Compliance (Hybrid)

Jobvite, Inc.; Chelmsford (MA); Hybrid; USD 98,000 - 130,000; Full time

Benefits offered by this job

Equity options

High-quality health benefits

Retirement Plan with employer match

Career-growth opportunities

Flexible Time Off

Volunteer opportunities

Job summary

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to manage global security compliance programs. You will coordinate external audits and mature control adoption across IT and product units, reporting to the Director of GRC.

The role emphasizes scalable, automated, data-driven programs, with hands-on work in implementing controls, conducting gap analyses, and monitoring ongoing obligations with external entities.

Qualifications

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent.
• Industry certifications such as CompTIA Security+ or equivalent.
• Experience with frameworks like ISO 27001 and NIST SP 800-53.
• 3+ years in Information Security, AI, Automation or related roles.
• 0-1 years hands on experience in Agentic AI use cases with LLMs.

Responsibilities

• Coordinate external audit cycles related to US Federal Security Compliance and SLED programs.
• Lead and coordinate security controls implementation in in-scope applications.
• Drive gap analysis initiatives and modernize self-assessment processes.
• Coordinate ongoing continuous monitoring with external entities (monthly, quarterly).

Skills

Audit coordination

Security controls

Remediation across teams

AI use cases development

Education

Bachelor’s degree in Information Security, IT/Computer Science, or equivalent

Tools

ISO 27001

NIST SP 800-53

Job description

Barracuda Networks is seeking a Senior Analyst, Security Governance, Risk & Compliance (GRC) to manage global security compliance programs. You will coordinate external audits and mature control adoption across IT and product units, reporting to the Director of GRC.

The role emphasizes scalable, automated, data-driven programs, with hands-on work in implementing controls, conducting gap analyses, and monitoring ongoing obligations with external entities.