Staff GRC Analyst: Cyber Essentials Lead

Procore Technologies, Inc.; Austin (TX); On-site; USD 137,000 - 188,000; Full time

Benefits offered by this job

Equity compensation

Bonus incentive compensation

Job summary

Procore Technologies, Inc. is seeking a Staff GRC Analyst to own Cyber Essentials Plus for UK customers. Based in our Austin office, you will lead the program end-to-end and collaborate with IT, Security, and our certification body to stay audit-ready year-round.

You will manage scope across devices, networks, cloud services and user accounts, validate controls hands-on, drive remediation, and align with ISO 27001 & SOC 2 as we scale compliance across the business.

Qualifications

• 7+ years of IT audit, GRC, or security compliance with end-to-end cert ownership.
• Hands-on knowledge of endpoint and cloud security controls; testing in Intune/Okta/AWS.
• Familiar with ISO 27001, SOC 2, or NIST CSF to connect controls.
• Ability to lead through influence across IT, Security, and business teams.
• Experience planning/completing compliance programs against external deadlines.
• Proficiency with GRC platforms for evidence collection and control tracking.
• Willingness to mentor other GRC analysts.
• Degree in IT/CS/Cybersecurity or related field; certifications a plus.

Responsibilities

• Own the Cyber Essentials Plus certification cycle end to end.
• Define and maintain certification scope across devices, networks, cloud, and users.
• Validate the five technical controls hands-on with IT and Security teams.
• Drive remediation of control gaps and track fixes to deadlines.
• Serve as primary contact for the certification body and coordinate assessments.
• Align Cyber Essentials with ISO 27001 and SOC 2 as we scale.
• Improve the program through automation and cleaner evidence processes.
• Report status and risks to leadership.

Skills

IT audit

GRC

Security compliance

Security controls

Influence

Mentoring

CISA/CISM/CISSP

Education

Degree in IT/CS/Cybersecurity

Tools

Intune

Okta

AWS

GRC platforms

Job description

Procore Technologies, Inc. is seeking a Staff GRC Analyst to own Cyber Essentials Plus for UK customers. Based in our Austin office, you will lead the program end-to-end and collaborate with IT, Security, and our certification body to stay audit-ready year-round.

You will manage scope across devices, networks, cloud services and user accounts, validate controls hands-on, drive remediation, and align with ISO 27001 & SOC 2 as we scale compliance across the business.