Strategic GRC & Cyber Risk Analyst

Chaos, Inc.; El Segundo (CA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

401k with company match

Free daily lunch

Unlimited PTO

No meeting Fridays

Job summary

CHAOS Industries is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to own and mature the cybersecurity GRC program across the business. You will translate broad requirements into actionable controls and work daily with IT, Cybersecurity, Physical Security, and Manufacturing to raise security maturity.

You will design a unified control framework, maintain risk registers, coordinate third-party audits, and report program maturity to leadership.

Qualifications

• Bachelor’s degree or equivalent experience in computer science, cybersecurity, information security, IT, information assurance, or related field.
• Minimum 5 years hands-on GRC or compliance experience, with prior DoD environment or military service.
• Deep knowledge of NIST CSF, NIST RMF, ISO/IEC 27000 series, UK Cyber Essentials, CMMC/NIST 800-171, NIST 800-53.
• Experience selecting, implementing, or administering GRC tooling and workflows.

Responsibilities

• Own risk assessments across departments and maintain the centralized risk register.
• Design and maintain a unified control framework tailored to CHAOS Industries' operating environment, with MTD, RPO, and RTO for critical systems.
• Write and maintain policy beyond minimum compliance to raise security maturity.
• Manage GRC tooling and workflows to support risk assessments, control monitoring and reporting.
• Coordinate audits, evidence collection, gaps, and auditor liaison with Legal, Compliance, IT, and business leaders.
• Travel up to 25%, onsite presence four days per week, support manufacturing and physical security control validation.

Skills

GRC analysis

Risk management

Policy writing

Audits coordination

Stakeholder communication

Education

Bachelor’s degree or equivalent in CS/Information Security

Tools

GRC tooling

Job description

CHAOS Industries is seeking an experienced Governance, Risk & Compliance (GRC) Analyst to own and mature the cybersecurity GRC program across the business. You will translate broad requirements into actionable controls and work daily with IT, Cybersecurity, Physical Security, and Manufacturing to raise security maturity.

You will design a unified control framework, maintain risk registers, coordinate third-party audits, and report program maturity to leadership.