Senior Information Security GRC Analyst

This role is a key contributor within a fast-evolving information security function, responsible for strengthening governance, risk, and compliance practices across the organization. You will play a central role in maintaining and evolving the security program, ensuring alignment with major regulatory frameworks such as SOC 2, ISO 27001, PCI, and NIST. The position combines hands-on compliance operations with strategic risk management, working closely with stakeholders across security, engineering, legal, and leadership teams. You will also manage GRC tooling, oversee audits, and ensure continuous improvement of internal controls and security processes. This is a highly cross-functional role requiring strong communication skills, attention to detail, and the ability to operate in a dynamic, fast-paced environment. You will help shape security culture while ensuring the organization meets and exceeds compliance expectations.