Staff GRC Analyst: Cyber Essentials Lead

DroneDeploy, Inc.; Austin (TX); On-site; USD 137,000 - 188,000; Full time

Job summary

Procore Technologies is seeking a Staff GRC Analyst to own the Cyber Essentials and Cyber Essentials Plus certification program end to end, working with IT, Security Engineering, and a certification body. Based in our Austin office, you will drive scope, control validation and remediation efforts to maintain audit readiness and protect customer data.

You will partner with cross-functional teams and apply knowledge of ISO 27001, SOC 2, and NIST CSF to streamline compliance.

Qualifications

• 7+ years of experience in IT audit, GRC, security compliance, or security consulting with end-to-end ownership of Cyber Essentials or Cyber Essentials Plus certifications.
• Hands-on knowledge of endpoint and cloud security controls, such as patch management, device configuration, and IAM, with testing in tools like Intune, Okta, AWS.
• Familiarity with ISO 27001, SOC 2, or NIST CSF to connect Cyber Essentials to the broader control environment.
• Proven ability to lead through influence across IT, Security, and business teams as an individual contributor.
• Experience planning and delivering compliance programs against external deadlines; certifications such as CISA, CISM, CISSP, or ISO 27001 Lead Auditor are a plus.

Responsibilities

• Own the annual Cyber Essentials Plus certification cycle end to end, including scoping, self-assessment, independent verification, and renewal.
• Define and maintain certification scope across devices, networks, cloud services, and user accounts.
• Validate five technical controls hands-on with IT and Security teams.
• Drive remediation of control gaps with control owners and track fixes to deadlines.
• Serve as the primary contact for the certification body and coordinate assessments and testing.
• Align Cyber Essentials with ISO 27001 and SOC 2 to reduce duplicate testing.
• Improve the program through automation and cleaner evidence processes.
• Report status and risks to leadership with clear, actionable updates.

Skills

IT audit & GRC

Security compliance

End-to-end ownership

Influence without authority

Education

Degree in IT/CS/Cybersecurity

Tools

Intune

Okta

AWS

Job description

Procore Technologies is seeking a Staff GRC Analyst to own the Cyber Essentials and Cyber Essentials Plus certification program end to end, working with IT, Security Engineering, and a certification body. Based in our Austin office, you will drive scope, control validation and remediation efforts to maintain audit readiness and protect customer data.

You will partner with cross-functional teams and apply knowledge of ISO 27001, SOC 2, and NIST CSF to streamline compliance.