Staff Security Analyst II (GRC)

jda; Dallas (TX); Remote; USD 130,000 - 164,000; Full time

Benefits offered by this job

Comprehensive benefits

401K with matching

Flexible time off

Corporate fitness program

Voluntary benefits

Job summary

Blue Yonder is seeking a Staff Security Analyst II, GRC to join its global cybersecurity team. This role coordinates IT and security controls, conducts risk assessments, and supports audits across product and internal processes.

You will work with cross-functional teams to implement and monitor controls in a regulated environment. The ideal candidate has 7+ years in security compliance or IT audit, strong communication, and experience with ISO 27001/SOC frameworks, cloud security, and AI

Qualifications

• Minimum 7 years of experience in information security compliance, GRC or IT audit roles.
• Experience applying IT and security control frameworks (ISO 27001, SOC 1/2), including testing, remediation and tracking.
• Familiarity with cloud security practices and shared responsibility model.
• Hands-on experience with AI Governance and ISO 42001.
• Excellent communication and stakeholder management skills.
• Strong analytical and problem-solving skills.

Responsibilities

• Lead internal IT and security control assessments aligned with industry standards (ISO 27001/27701/22301, SOC1/2 Type II).
• Identify control deficiencies and drive remediation activities with stakeholders.
• Support evidence collection and documentation of controls for audits.
• Regularly communicate compliance posture to stakeholders and leadership.
• Stay current with regulatory and security standards and frameworks.
• Train and prepare control owners for audit participation and evidence collection.
• Plan, coordinate and manage internal and external audit activities including schedules and scope.
• Manage report reviews, respond to audit findings, and track remediation to closure.

Skills

Communication

Analytical thinking

Stakeholder management

Cloud security

Education

Bachelor’s degree in Information Systems, Cybersecurity, Business or related field

Certifications: CISA, CISM, or CISSP (preferred)

Job description

Role: Staff Security Analyst II, GRC

Location: US Remote

Synonymous Business Title (s): Sr. Program Manager, Security

Overview

Blue Yonder is a global leader in AI-driven digital supply chain solutions, empowering businesses to optimize and transform their operations with innovative, intelligent technology. As we shape the future of global cybersecurity, our GRC team is seeking a talented Staff Security Analyst II, GRC.

This role will work across teams to ensure Blue Yonder product and internal processes are operating and managed with appropriate IT and security controls that meet regulatory, industry, and internal standards. This role partners with cross-functional teams to ensure controls are implemented and operating effectively and manage audit engagements.

What You’ll Be Doing

Control Management

• Lead internal IT and security control assessments aligned with best practice standards and frameworks (ISO 27001/27701/22301, SOC1/2 Type II, etc.)
• Identify control deficiencies and drive remediation activities with stakeholders
• Support evidence collection and documentation of controls in support of internal and external audits
• Regularly communicate compliance posture to stakeholders and leadership
• Stay current with regulatory and security compliance standards and frameworks

Audit Readiness and Management

• Train and prepare control owners for audit participation and evidence collection
• Plan, coordinate and manage internal and external audit activities including audit schedules and scope
• Manage report reviews, respond to audit findings, and track remediation to closure

What We’re Looking For

Required Qualifications

• Minimum 7 years of experience in information security compliance, GRC or IT audit roles.
• Strong experience applying IT and security control frameworks (ISO 27001, SOC 1 and 2), including end-to-end control testing, remediation management, and corrective action tracking.
• Familiarity with cloud security practices and the shared responsibility model.
• Hands-on experience with AI Governance and compliance frameworks, such as ISO 42001.
• Excellent communication and stakeholder management skills.
• Strong analytical and problem‑solving skills.

Preferred Qualifications

• Certifications such as CISA, CISM, or CISSP (preferred but not required)
• Bachelor’s degree or equivalent in Information Systems, Cybersecurity, Business or related field

#LI-MH1

The annual base salary range for this position is $130,023.09 - $163,976.90

The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:

• Comprehensive Medical, Dental and Vision
• 401K with Matching
• Flexible Time Off
• Corporate Fitness Program
• A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success - and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.