Senior Tech GRC Analyst

Rate; Chicago, Northern (IL, KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Remote work

Job summary

Rate, a Chicago-based mortgage lender, seeks a Senior Technology Governance, Risk & Compliance (GRC) Analyst to mature Rate's GRC program. The role collaborates with Security, IT and Product to automate risk and compliance using AI-driven agents and workflows.

You will manage risk assessments, maintain the technology risk register, support audits, and deliver dashboards and metrics for leadership. This full-time remote role offers competitive rewards.

Qualifications

• 4–6 years of experience in Technology, Security, Audit, Compliance, or GRC roles.
• Experience using or building AI/automation tools to improve processes.
• Strong knowledge of NIST, SOC 2 and other control frameworks.
• Proven ability to manage cross-functional projects with minimal supervision.
• Strong data and analytical skills; ability to build metrics/dashboards.
• Excellent written and verbal communication.

Responsibilities

• Identify high-volume GRC tasks and build AI agents to improve efficiency.
• Maintain AI tools and ensure audit-ready outputs.
• Support implementation of Rate's GRC platform and admin tasks.
• Lead cross-team tech risk and compliance initiatives.
• Develop and refine GRC metrics and dashboards.

Skills

AI Tools

NIST/SOC 2

Cross-functional

Data Analytics

Risk Management

Audit/Compliance

Job description

## Senior Tech GRC AnalystApply: GRI - IL - Chicago - 3940 N Ravenswood: Full time: Posted Today: JR101808Rate is one of the nation’s top retail mortgage lenders, delivering a seamless, tech-driven experience that helps customers reach their homeownership and financial goals. Founded in 2000 and based in Chicago, Rate is licensed in all 50 states and D.C. and has helped over 2 million homeowners with a wide range of loan products, competitive rates and personalized service. With 5,000+ employees across 300+ offices and 12+ subsidiaries, Rate’s Loan Officers rank among the best in the country. From purchases and refinances to tapping into equity, Rate makes financing faster, simpler and less stressful. Our technology — including Same Day Mortgage, the Rate App, FlashCloseSM, MyAccount and the Language Access Program — has earned recognition from HousingWire, Scotsman Guide, NerdWallet, the Chicago Tribune and Crain’s Chicago Business. Learn more at rate.com.Job Profile:Sr. Security AnalystJob Description Summary:We are committed to providing a competitive and equitable total rewards package. The compensation for this role is designed to attract, retain, and motivate top talent.Job Description:**Why Rate is the BEST Place to Work** Rate is one of the nation's top retail mortgage lenders, delivering a seamless, tech-driven experience that helps customers reach their homeownership and financial goals. Founded in 2000 and based in Chicago, Rate is licensed in all 50 states and D.C. and has helped over 2 million homeowners with a wide range of loan products, competitive rates and personalized service. With 5,000+ employees across 300+ offices and 12+ subsidiaries, Rate's Loan Officers rank among the best in the country. From purchases and refinances to tapping into equity, Rate makes financing faster, simpler and less stressful. Our technology — including Same Day Mortgage, the Rate App, FlashCloseSM, MyAccount and the Language Access Program — has earned recognition from HousingWire, Scotsman Guide, NerdWallet, the Chicago Tribune and Crain's Chicago Business. Learn more at rate.com. **What Makes Our Team Awesome** **We are a gritty group of passionate technologists on a mission to dominate the mortgage world!** The Information Technology Team within Rate passionately and consistently puts our customers first. We are building the latest technology to help create the best mortgage experience on the planet and get your mortgage, your way, anytime, anywhere. Whether that is improving our digital mortgage platform, automating loan coordination and underwriting processes, or building out the latest marketing and customer engagement platform, we're doing it all. We build high-performing, self-organized, cross-functional agile teams that operate with minimal hierarchy. Information Technology team members hold themselves and others accountable and live and breathe the tenets of autonomy, mastery, and purpose. **What's the Role?** The Senior Technology Governance, Risk & Compliance (GRC) Analyst plays a critical role in maturing Rate's Technology GRC program by pairing governance, risk and compliance expertise with a forward-leaning approach to automation and AI. This person runs our GRC processes while actively building and maintaining AI-driven tools and agents that increase the speed, consistency, and scale of the GRC function. The analyst partners across Tech (Security, IT and Product) to manage highly cross-functional risk initiatives, and is expected to operate with minimal direction, move fluidly across governance, risk, and compliance workstreams, and deliver accurate work across a fast-moving workload. **Responsibilities** **GRC Technology & Automation** * Identify high-volume, repeatable GRC tasks (evidence collection, control testing, risk scoring, reporting) and build and deploy AI agents or automation workflows to improve efficiency and consistency.* Maintain, monitor, and iterate on existing AI tools/agents supporting GRC processes, ensuring outputs remain accurate and audit-ready.* Support the implementation of Rate's GRC platform and provide ongoing platform administration.* Build and maintain workflows within the GRC platform and propose process updates to improve efficiency and usability.* Stay current on AI and automation trends relevant to GRC and proactively recommend new use cases. **Risk Management** * Plan and execute risk control self-assessments (RCSAs) across Technology domains.* Evaluate risk evidence and control documentation for completeness, accuracy, and sufficiency.* Maintain and continuously improve the technology risk register, ensuring risks are logged, scored, tracked, and remediated to schedules.* Support risk tolerance and risk appetite adjustments as directed by leadership, updating supporting documentation and communicating changes to stakeholders.* Provide guidance to Tech teams (Security, Product, and IT) on risk remediation planning and prioritization. **Compliance & Controls Management** * Create, update, and maintain Technology policies and standards.* Support the ongoing management of IT General Controls (ITGCs) and other relevant control requirements.* Support internal and external Technology audit processes, including evidence gathering, walkthroughs, and issue remediation tracking.* Support ongoing alignment with applicable frameworks and regulatory requirements (e.g., NIST, SOC 2). **GRC Metrics & Data Analysis** * Build, maintain, and interpret data sets that feed Technology GRC metrics, KPIs, and KRIs.* Translate raw Technology risk and compliance data into clear, actionable reporting for stakeholders and leadership.* Continuously refine metrics and dashboards to reflect evolving program priorities and risk tolerance.* Ensure data integrity and accuracy across GRC platforms and reporting tools. **Cross-Team Program & Project Management** * Lead and coordinate cross-team Tech risk and compliance initiatives involving Technology, Security, and Product.* Manage competing priorities and timelines across multiple concurrent GRC workstreams with minimal oversight.* Serve as a primary point of contact for stakeholders on assigned Tech risk, compliance, and audit initiatives.* Coordinate with GRC personnel to maintain a shared, program-level view of risk, compliance, and audit activity, ensuring consistency across workstreams.* Communicate progress, risks, and roadblocks clearly and proactively to leadership. **Qualifications** * 4–6 years of experience in Technology, Security, Audit, Compliance, or GRC roles.* Demonstrated experience using or building AI/automation tools (e.g., scripting, AI agents, etc) to improve process efficiency; hands-on comfort with AI platforms strongly preferred.* Strong working knowledge of common control frameworks (NIST, SOC 2, etc.).* Proven ability to manage cross-functional projects and stakeholders with minimal supervision.* Strong data and analytical skills; experience building and maintaining metrics/dashboards from large or complex data sets.* Comfortable evaluating risk evidence and control documentation for completeness and accuracy.* Ability to deliver precise, high-quality work across a high-volume, fast-moving workload.* Highly self-directed; able to prioritize and execute independently.* Comfortable operating across multiple GRC disciplines (risk, compliance, audit, metrics) and shifting priorities fluidly.* Strong documentation skills, with the ability to produce clear, audit-ready documentation.* High attention to detail.* Excellent written and verbal communication skills; able to engage stakeholders at all levels. **Reporting & Structure**Reports to: VP, Operational Resilience & Technology RiskCross-functional partners: Security, Product, and IT **Other Useful Details** Employee Type: Full-TimePay Range: annual pay + bonus and/or commissionsLocation: Remote **Rate Companies is an Equal Opportunity Employer that welcomes and encourages all applicants to apply regardless of age, race, sex, religion, color, national origin, disability, veteran status, sexual orientation, gender identity and/or expression, marital or parental status, ancestry, citizenship status, pregnancy or other any other protected characteristic. #LI-Remote**