Sr Risk Analyst

Crunchyroll; Dallas (TX); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Performance bonus earning potential

Flexible time off

Generous medical, dental, and life insurance

401(k) plan with employer match

Pet insurance

Job summary

Crunchyroll is seeking an experienced Risk Analyst to support our Information Security GRC team. This role emphasizes governance, risk, and compliance, ensuring technology evolution aligns with employee needs and strategic goals.

Successful candidates will have over 8 years of experience in GRC programs and a deep understanding of security standards and frameworks. Crunchyroll offers a competitive compensation package, flexible time off, and generous benefit plans, fostering growth in a dynamic environment.

Qualifications

• 8+ years supporting GRC programs in Information Security or IT.
• Experience leading PCI, SOX, and Audit assessments.
• Ability to navigate complex organizations.

Responsibilities

• Level-up Information Security GRC at Crunchyroll.
• Implement and govern security standards.
• Improve processes related to Vulnerability Management Program.

Skills

Supporting GRC programs

Leading PCI and Audit assessments

Experience with IAM best practices

Understanding of security frameworks

Risk assessment experience

Vendor assessments and management

Cloud platforms knowledge (GCP, AWS)

Communication of complex issues

Education

BS in Computer Science or related field

Tools

GRC tools

Job description

About the Role

Our team is looking for someone with the passion and skills to support the evolution of our corporate Information Security GRC team. A specific focus will be on defining processes and implementing technology to support a comprehensive enterprise security program, including governance, risk, and compliance (GRC). This role will be responsible for ensuring we are designing and evolving technologies in consideration of employee needs, supporting long‑range strategy, cross‑functional projects, and initiatives across Crunchyroll globally. This role will require a strong partnership across Crunchyroll’s teams, including Legal, Engineering, IT, People, Workplace Experience, Trust & Safety, as well as third‑party contractors, and suppliers.

About You

• You have 8+ years supporting GRC programs in Information Security or Information Technology
• You have experience leading PCI, SOX, and Audit (internal and external) assessments
• You have experience supporting council and oversight committees
• You have experience with cloud based platforms such as GCP and AWS
• You have experience with IAM best practices and administration
• You have a strong fundamental understanding of security best practices and frameworks such as PCI, NIST, and ISO
• You have experience with control testing and evidence validation
• You have experience performing risk assessments
• You have experience with vendor assessments and management
• You have experience working with and optimizing GRC tools
• You have the ability to learn new technologies and concepts quickly and apply that knowledge effectively
• You have working knowledge of AI technologies
• You have the ability to navigate complex organizations
• You are data driven and have a strong attention to detail
• You have the ability to communicate complex issues to a wide audience, from technical staff to management
• You have demonstrated experience maintaining effective working relationships across all levels of an organization and with a variety of external constituents
• You approach work with a positive and collaborative attitude
• You are curious and want to grow in a dynamic, security‑focused environment

Pluses

• You have security certification(s)
• You have knowledge of data privacy laws and regulations, including GDPR, CCPA
• You have experience with cloud environments such as GCP or AWS
• You have a BS in Computer Science or a related field or have equivalent experience

A Day in the Life of a Risk Analyst

• Working with a focus to level‑up Information Security GRC at Crunchyroll
• Partnering with teams across the company to implement and govern security standards to optimize compliance adherence
• Supporting and improving processes related to the Vulnerability Management Program
• Investigating and assessing control effectiveness and maturation
• Monitoring and facilitating governance activities
• Supporting the GRC and Privacy Programs as needed
• Staying up to date on regulatory trends
• Supporting our team and improving internal processes
• Creating reports and documentation to support the Information Security GRC program
• Approaching each day with a focus on fostering an environment encouraging growth personally, professionally, and for those around you

Benefits

• Great compensation package including salary plus performance bonus earning potential, paid annually
• Flexible time off policies allowing you to take the time you need to be your whole self
• Generous medical, dental, vision, STD, LTD, and life insurance
• Health Savings Account (HSA) program
• Health care and dependent care Flexible Spending Account (FSA)
• 401(k) plan, with employer match
• Employer paid commuter benefit
• Support program for new parents
• Pet insurance and pet‑friendly offices

Equal Opportunity Employer

We are an equal opportunity employer and value diversity at Crunchyroll. Pursuant to applicable law, we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.