Senior Security GRC Lead — Risk, Policy & AI Governance

Yahoo Holdings Inc.; Baltimore (MD); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Healthcare

401(k) plan

Education stipends

Backup childcare

Job summary

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join the Paranoids team. The role sits at the intersection of exception management, risk assessment, and policy governance, partnering with business leaders, engineers, and security teams to communicate risks and craft mitigation plans.

You will draft risk memos for executives, assess property security postures, and develop standards. A flexible hybrid work model accompanies a strong emphasis on AI-driven governance and risk

Qualifications

• 5+ years in security governance, risk management, or a related information security discipline.
• Experience conducting security risk assessments and communicating actionable findings to senior leaders.
• Strong written and verbal communication—executive memos and cross-functional collaboration.
• Working knowledge of risk methodologies and frameworks (e.g., NIST CSF, ISO 27001, FAIR).
• Experience developing or managing security policies, standards, or governance programs.
• Familiarity with AI tools to accelerate productivity and govern AI outputs.

Responsibilities

• Evaluate and document known security risks for executive review with actionable options.
• Manage end-to-end lifecycle of risk exceptions from intake to reassessment.
• Conduct risk assessments against Paranoids policies, frameworks, and modern architecture.
• Draft, revise, and maintain security policies and standards.
• Collaborate with stakeholders to socialize new or updated standards and gain alignment.
• Translate technical security concepts for non-technical stakeholders and provide business context.
• Identify and implement AI-assisted workflows to streamline risk reviews.

Skills

Security governance

Risk assessment

Executive communication

NIST CSF

ISO 27001

AI governance

Regulatory compliance

FAIR

Tools

ServiceNow GRC

Archer

Jira

Job description

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join the Paranoids team. The role sits at the intersection of exception management, risk assessment, and policy governance, partnering with business leaders, engineers, and security teams to communicate risks and craft mitigation plans.

You will draft risk memos for executives, assess property security postures, and develop standards. A flexible hybrid work model accompanies a strong emphasis on AI-driven governance and risk