Senior Security GRC Lead - Risk & Policy, AI-Driven

Yahoo Holdings Inc. in; Champaign (IL); Hybrid; USD 128,000 - 267,000; Full time

Job summary

Yahoo is seeking a Senior Security GRC Analyst to join The Paranoids. You will own risk assessment, exception management, and policy governance across Yahoo properties, partnering with business leaders and engineers to address security risks. The role emphasizes AI-assisted workflows and communicating risk to senior leadership.

You will draft risk memos, ensure policy compliance, and drive governance with a modern, fast-moving security mindset. Hybrid work options are available.

Qualifications

• 5+ years of experience in security governance, risk management, or compliance within modern technology environments.
• Experience conducting comprehensive security risk assessments and communicating actionable findings to senior leadership and technical teams.
• Strong written and verbal communication skills with the ability to present executive-ready risk memos and collaborate with engineers.
• Familiarity with security frameworks (NIST CSF, ISO 27001, GDPR) and applying them to cloud, web apps, and identity systems.
• Proven experience developing or managing security policies, standards, or risk-acceptance governance programs.
• Experience using generative AI tools (e.g., Claude, ChatGPT, Gemini, Copilot) to accelerate productivity and automate workflows.

Responsibilities

• Evaluate and document known security risks for executive review with clear, contextual risk information.
• Manage end-to-end risk exception lifecycle from intake to reassessment across Yahoo properties.
• Conduct risk assessments against policies, frameworks, and modern architecture patterns.
• Draft and maintain security policies and standards for engineering and product teams.
• Collaborate with stakeholders to socialize new/updated standards and gain cross-functional alignment.
• Act as a liaison translating technical security concepts for non-technical stakeholders.
• Identify and implement AI-assisted workflows to streamline GRC tasks and reviews.

Skills

Security governance

Security risk assessment

Policy & standards management

Executive communication

AI tooling experience

Regulatory compliance

Tools

ServiceNow GRC

Archer

Jira

Job description

Yahoo is seeking a Senior Security GRC Analyst to join The Paranoids. You will own risk assessment, exception management, and policy governance across Yahoo properties, partnering with business leaders and engineers to address security risks. The role emphasizes AI-assisted workflows and communicating risk to senior leadership.

You will draft risk memos, ensure policy compliance, and drive governance with a modern, fast-moving security mindset. Hybrid work options are available.