Senior GRC Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior GRC Analyst maintaining ISO 27001 and SOC 2 compliance for FYUL, which powers global on-demand commerce. Automating audits, vendor security, risk, and governance operations.
Responsibilities:
- Plan and execute internal and external audit activities across ISO 27001, SOC 2, and related frameworks
- Collect evidence and ensure control readiness
- Communicate directly with external auditors
- Follow through on audit findings until closure
- Represent the function in audit interactions and professionally decline inappropriate requests when necessary
- Design and implement automation for evidence collection and recurring compliance activities
- Apply compliance-as-code practices where they deliver measurable value
- Leverage AI-based agents and workflows to reduce manual effort
- Maintain working knowledge of the commercial GRC platform landscape
- Prefer established industry solutions over custom development
- Conduct security assessments of third-party vendors during onboarding and annual reviews
- Continuously improve vendor security assessment efficiency
- Maintain the risk register
- Perform risk assessments and track remediation plans
- Ensure timely closure of identified risks
- Develop and maintain information security policies and procedures with the manager
- Contribute to security awareness materials and training delivery
Requirements:
- 5+ years of experience in cybersecurity GRC, IT audit, or security compliance
- Direct hands-on participation in complete ISO 27001 and/or SOC 2 audit cycles
- Strong communication and negotiation skills
- Professional confidence to hold a position under pressure from auditors, vendors, and internal stakeholders
- Judgment to know when refusal is the correct response
- Demonstrated automation capability through scripts, integrations, GRC platform implementations, or AI-assisted workflows
- Track record of building practical automation; software engineering background is not required
- Self-directed working style with strong ownership
- Ability to take ambiguous problems through to completed outcomes with minimal supervision
- Excellent written and spoken English
- Relevant certifications such as ISO 27001 Lead Implementer/Lead Auditor, CISA, CISSP, or CISM are an advantage, not a requirement
- Practical audit experience weighted more heavily than certification
Benefits:
- A high-trust, compact team with minimal bureaucracy
- An opportunity to work remotely or in a modern and welcoming office in Riga
- Flexible working hours (start your day as late as 11 AM)
- Private health insurance
- 2 extra paid days off to focus on your mental or physical well-being
- 1 extra paid day off to celebrate a Birthday or any other celebration of your choice
- Internal and external learning opportunities
- Access to mentorship, internal meetups, and hackathons, both on-site and online
- Free and healthy lunch if you work from the Rīga office
- Design and order your own merch using our platforms with an employee discount
- Exciting team-building events and parties you’ll never forget!
Similar Jobs
Senior Risk Advisor
Senior Risk Advisor strengthening internal controls, risk management, and audit governance for Blue Cross NC healthcare operations. Conducting audits, testing controls, and advising management across subsidiaries.
Manager, Risk Adjustment Operations
Risk Adjustment Operations Manager leading analytics, reporting, and process alignment for Horizon Blue Cross Blue Shield of New Jersey. Managing staff and enterprise initiatives across health plan operations.
Principal Associate, Insurance Risk
Insurance risk principal associate protecting Capital One’s commercial loan portfolio. Reviewing commercial coverage, resolving deficiencies, managing waivers, and guiding GSE-related insurance compliance.
Oversight and Governance Lead
Oversight and Governance Lead strengthening cybersecurity governance, audits, and quality controls. Supporting SkyePoint Decisions’ federal government IT services and mission assurance.
Clinical Quality and Governance Lead – ADHD Titration Service
Clinical governance lead overseeing quality, incidents, complaints and audits for Psychiatry UK’s ADHD Titration Service. Improving safe, effective mental healthcare across the UK.
Manager, Risk Adjustment Vendor & Performance Management
Risk adjustment vendor manager optimizing analytics, KPIs, contracts, and performance for Horizon Blue Cross Blue Shield of New Jersey. Leading enterprise vendor strategy across Commercial, Medicare, and Medicaid programs.
Director, Client Operations – Risk & Complexity Enablement
BMO Director leading remote InvestorLine operations, risk, resilience and complex client resolution. Driving service performance, modernization adoption, controls and workforce readiness across Canadian provinces.
RN II, Commercial Risk Adjustment
RN managing high-risk members and commercial risk adjustment care for Horizon Blue Cross Blue Shield of New Jersey. Coordinating outreach, wellness visits, utilization management, and individualized care plans.
VP, Sales – Risk & Quality
VP Sales growing HealthEdge’s risk adjustment and quality healthcare SaaS revenue. Expanding payer accounts through complex enterprise sales, CMS-aligned solutions, and market strategy.
Senior Benefit/Risk Associate
Senior Benefit/Risk Associate conducting pharmacovigilance signal detection and risk evaluation for PrimeVigilance. Supporting regulatory communications and patient-safety activities within global project teams.
Risk Analyst
Risk Analyst analyzing credit, underwriting, portfolio behavior, and profitability for Flex’s AI-native private bank serving business owners. Building risk models and dashboards to improve lending decisions.
Large Loss Risk Adjuster
Large Loss Risk Adjuster evaluating severe, complex claims for National General, a specialty personal and commercial insurer. Granting settlement authority and guiding litigation and coverage decisions.
Head of Risk
Head of Risk building firm-wide quantitative risk systems for Keyrock’s digital-asset trading and capital-markets businesses. Overseeing market, credit, liquidity and crypto-native risks.
Product Coordinator – MarTech Platform, Governance
Product Coordinator managing intake, access governance, and operations across enterprise MarTech platforms. Coordinating Adobe Experience Cloud and Experience Platform stakeholders for scalable governance.
Student, Data Governance Analyst
Student Data Governance Analyst applying machine learning and Python automation to protect PII and manage metadata. Supporting Sun Life's financial-services data governance and reporting initiatives.
Senior Risk Associate
Senior Risk Associate owning client, vendor, and enterprise risk assessments for Lithic's fintech card issuing platform. Driving underwriting, AI-assisted workflows, and regulatory-ready risk programs.
Data Governance Analyst
Analista de Governança de Dados & IA na Stone, empresa brasileira de tecnologia e serviços financeiros. Garantindo dados confiáveis, governança e soluções de IA para Planejamento e Controle.
Manager, Vendor Performance – Governance
Managing vendor performance, governance, compliance, and risk for Alignment Health’s Medicare Advantage health plan. Driving accountability, cost efficiency, and improved member and provider experiences.
Certified Risk Coder
Certified Risk Coder reviewing medical records and validating HCC diagnoses for Astrana Health’s value-based care programs. Educating providers and improving coding compliance remotely.
Senior Associate L3 – Cyber Data & Tech Risk Managed Services, Saviynt IAM Operations
Saviynt IAM Operations Senior Associate delivering L3 identity governance support for PwC Cyber Managed Services. Troubleshooting incidents, engineering integrations, and improving enterprise IGA stability.