Strategic Security GRC Lead: Risk, Policy & AI

Yahoo Holdings Inc.; Richardson (TX); Hybrid; USD 128,000 - 267,000; Full time

Benefits offered by this job

Flexible hybrid work options

Healthcare benefits

401k and education stipends

Job summary

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join The Paranoids and strengthen risk governance across Yahoo properties. You’ll evaluate risks, manage exception lifecycles, and align security policy with business needs.

You will partner with leaders, engineers, and security teams to communicate risk, draft standards, and drive AI-enabled governance initiatives in a fast-moving landscape.

Qualifications

• 5+ years of experience in security governance, risk management, or related information security disciplines.
• Experience conducting security risk assessments and communicating findings to leadership and teams.
• Strong written and verbal communication, with executive-level memo writing and cross-team collaboration.
• Knowledge of security frameworks (NIST CSF, ISO 27001, FAIR) and applying them to cloud, web apps and identity systems.
• Experience developing or managing security policies, standards, or governance programs.
• Proficiency with generative AI tools to accelerate documentation and risk analyses.
• Understanding AI data confidentiality and risk governance.
• Familiarity with regulatory frameworks (SOC 2, PCI DSS, GDPR).
• Proven track record of improving assessment programs and policy lifecycles.

Responsibilities

• Evaluate and document known security risks for executive review with actionable options.
• Manage end‑to‑end lifecycle of risk exceptions from intake to reassessment.
• Conduct property-level and initiative-level risk assessments against policies and frameworks.
• Draft, revise, and maintain security policies and standards for engineering and product teams.
• Socialize new or updated standards with stakeholders to build cross-functional alignment.
• Translate technical security concepts for non-technical stakeholders while preserving business context.
• Identify AI-assisted workflows to automate GRC tasks and reviews.

Skills

Security governance

Risk management

Compliance

Executive communication

AI tools proficiency

Cloud security

Policy development

Stakeholder management

Regulatory knowledge

Tools

ServiceNow GRC

Archer

Jira

Job description

Yahoo Holdings Inc. is seeking a Senior Security GRC Analyst to join The Paranoids and strengthen risk governance across Yahoo properties. You’ll evaluate risks, manage exception lifecycles, and align security policy with business needs.

You will partner with leaders, engineers, and security teams to communicate risk, draft standards, and drive AI-enabled governance initiatives in a fast-moving landscape.