Senior Governance, Risk, and Compliance (GRC) Analyst

About the role

We are looking for a Senior Governance, Risk, and Compliance (GRC) Analyst to lead our global cloud compliance strategy. You will design and maintain the IT governance roadmap, secure our multi‑cloud environment, and provide risk insights to executive leadership.

Key responsibilities

• Architect cloud governance by designing, writing, and updating security compliance roadmaps for AWS, Azure, and M365.
• Lead continuous compliance initiatives using tools such as AWS Audit Manager and Microsoft Purview.
• Maintain the enterprise cloud risk registry, monitor configurations, DLP, and IAM policy enforcement.
• Advise senior executives and board members on cloud security and compliance risks.
• Serve as primary contact for external audits (SOC 2, ISO 27001, NIST) and high‑value vendor evaluations.
• Mentor and develop junior GRC team members and related IT staff.

Required profile

• 5+ years of experience in cybersecurity, IT audit, or corporate cloud risk management.
• Proven leadership in cross‑functional projects and external audit coordination.
• Industry certifications such as CISSP, CISM, CRISC, CISA; cloud certifications are a plus.

Required skills

• AWS (including AWS Audit Manager, AWS Certified Security – Specialty)
• Microsoft Azure and M365 (including Azure Security Engineer Associate, Microsoft Purview)
• IAM, Data Loss Prevention (DLP)
• Compliance frameworks: NIST, ISO 27001, SOC 2, SOX, GDPR, CCPA
• Strong communication and stakeholder management