Strategic GRC Security Analyst: Risk & Compliance Leader

Openkrill; United States; Remote; USD 114,000 - 139,000; Full time

Benefits offered by this job

Profit-sharing bonus

Communication stipends

Referral bonuses

Comprehensive medical/dental/vision

Job summary

Clear Capital is seeking a GRC Security Analyst to ensure adherence to security standards and regulatory requirements within the mortgage lending and appraisal space. You will drive risk assessments, policy development, and audit coordination while engaging stakeholders across the organization.

You will evaluate third-party vendor security, maintain governance records, and report on metrics to leadership. A strong background in GRC, privacy regulations, and security frameworks is essential for

Qualifications

• Minimum 5 years in GRC, security compliance, or risk management (or 3 years with master’s).
• Complete knowledge of NIST CSF, SOC 2, ISO 27001/42001, data privacy regs (GLBA, GDPR, CCPA).
• Certifications: CISSP, CISM, CISA, CRISC, AIGP (or equivalent).
• Ability to assess complex security issues and devise solutions independently.
• Strong communication and ability to influence senior stakeholders.

Responsibilities

• Monitor and enforce compliance with major security frameworks and regulations in financial services and real estate valuation.
• Conduct risk assessments across diverse scopes and remediate findings.
• Develop and update security policies, procedures, and guidelines.
• Lead preparation and participation in internal and external audits.
• Collaborate with cross-functional teams to remediate security gaps and ensure vendor compliance.
• Maintain records and generate reports for management and regulators.
• Define metrics to measure security program success and report to leadership.

Skills

GRC/ security framework knowledge

Analytical thinking

Communication & stakeholder management

GRC tools (Vanta, Drata, OneTrust)

Documentation & reporting

Cloud, DevOps, app security basics

Data privacy regulations (GLBA, GDPR,

Education

Bachelor’s degree in a related field

Master’s degree (preferred)

Tools

Vanta

Drata

OneTrust

Job description

Clear Capital is seeking a GRC Security Analyst to ensure adherence to security standards and regulatory requirements within the mortgage lending and appraisal space. You will drive risk assessments, policy development, and audit coordination while engaging stakeholders across the organization.

You will evaluate third-party vendor security, maintain governance records, and report on metrics to leadership. A strong background in GRC, privacy regulations, and security frameworks is essential for