Senior Security GRC Analyst - Risk, Policy & AI Ops

Yahoo Holdings Inc.

Omaha (NE)

Hybrid

USD 128,000 - 267,000

Full time

6 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Healthcare

401(k)

Backup childcare

Education stipends

Job summary

Yahoo is seeking a Senior Security GRC Analyst to join The Paranoids, responsible for exception management, risk assessment, and policy governance. You will partner with business leaders, engineers, and security teams to document risks and drive informed decisions, including drafting risk memos for the CISO and shaping security standards across properties.

The role emphasizes AI-enabled governance, policy development, and collaboration across the enterprise.

Qualifications

5+ years in security governance, risk management, or related info security.
Experience conducting security risk assessments and communicating findings to leadership.
Strong written and verbal communication for executive audiences.

Responsibilities

Evaluate known security risks for executive review with actionable options.
Manage end-to-end risk exception lifecycle across Yahoo properties.
Assess risk against policies, frameworks, and modern architectures.
Draft and maintain security policies and standards for engineering and product teams.
Collaborate with business stakeholders to socialize updated standards and gain cross-functional alignment.
Translate technical security concepts for non-technical stakeholders and inform risk decisions.
Identify and implement AI-assisted workflows to streamline GRC tasks.