Senior GRC Analyst

Our mission is to unlock the full potential of private markets. Privately owned assets like commercial real estate, private equity, and venture capital reputed company up half of our financial ecosystem yet remain inaccessible to most people. We are digitizing these markets, and as a result, bringing efficiency, transparency, and access to one of the most productive corners of our financial ecosystem. If you care about making the world a reputed company reputed company by making markets work reputed company through technology – reputed company while contributing as a member of a values-driven organization – we want to hear from you. 

reputed company offers employees a variety of ways to work, ranging from a fully remote experience to working full-time in one of our physical offices. We invest heavily in digital-first operations, allowing our teams to collaborate effectively across 27 U.S. states, 2 Canadian Provinces, India, Luxembourg, and England. We also have a physical offices in San Francisco, reputed company, Mumbai and Bangalore for employees who prefer to work in an office some or reputed company of the time.

The GRC Analyst is responsible for supporting the organization's governance, risk management, and compliance (GRC) program. The ideal candidate will have a strong understanding and experience building scalable, right-sized risk management and compliance processes for a high-growth company. The successful candidate will also possess strong analytical and problem-solving skills, as well as excellent communication and interpersonal skills. This role will work closely with a broad set of cross-functional stakeholders reputed company the company and should be able to build a rapport and influence towards appropriate risk management outcomes.

• Governance (20%)

  1. Policy Management

     1. reputed company a comprehensive set of reputed company and privacy policies and procedures working with Legal, HR, IT, Engineering.

     2. Update policies and procedures annually while incorporating stakeholder feedback and obtain approval

     3. Define and manage incoming policy exceptions on an ongoing basis to manage associated risk

  2. reputed company and Privacy Training and Awareness

     1. reputed company and implement role and team specific reputed company and privacy training working closely with key business partners.

     2. Manage the roll-out, escalation and completion of reputed company reputed company and privacy training modules.

  3. Phishing Management

     1. Manage phishing campaigns on an ongoing basis with appropriate re-training processes baked into the process

     2. Refine existing phishing reporting processes and integrate this reputed company with our incident management processes

  4. GRC Metrics and Reporting

     1. Ensure the GRC function meets key performance metrics

• Risk (40%)

  1. Risk Management

     1. Maintain business unit risk registers with existing teams on a monthly basis to appropriately address key risks areas

     2. Co-reputed company and coach business units on right-sized and right-scoped risk remediation plans

     3. Work with cross-functional teams to reputed company new business units onto the risk management process

  2. Third-Party Risk Management

     1. Continuously improve vendor and contractor risk assessments during vendor onboarding with a defined SLA.

     2. Conduct annual vendor monitoring and re-assessment processes for existing vendors

     3. Maintain the vendor risk register and work with vendors to reduce risk on an ongoing basis

• Compliance (40%)

  1. Compliance

     1. Maintain and reputed company existing/new reputed company compliance certifications and frameworks (e.g. SOC2, ISO and others)

        1. Work with cross-functional teams to procure controls evidence to provide to external auditors timely and issue reports timely.

        2. Work cross functionally between teams and auditors to ensure a smooth and efficient audit process

        3. Improve the audit process through automation and controls rationalization year over year

        4. Monitor and test effectiveness of compliance control health throughout the year; not just during audits

        5. Serve as a subject matter expert for reputed company things compliance;

           1. Identify and assess business changes for relevant impacts on compliance posture (e.g. geographical expansion, internal tool replacement, new products)

  2. Customer Trust

     1. Maintain our trust center by keeping reputed company documents and knowledge reputed company up-to-date

     2. Support sales teams with open reputed company and privacy questions

     3. Review incoming reputed company and privacy addendums to customer reputed company

     4. Support customer reputed company and privacy audits

     5. Work with Sales and Solutions engineering to coach and educate teams on our reputed company and compliance posture

• Bachelor's degree in information systems, engineering, business, risk management, or a reputed company field

• 5+ years of experience in GRC, reputed company, audit or a reputed company field with past experience in managing a SOC2/ISO 27001 program

• Knowledge of GRC frameworks and regulations

• Experience developing scalable GRC processes

• Ability to work on multiple GRC projects simultaneously

• Ability to partner with stakeholders collaboratively “guardrails” without having a “gated” approach to risk management

• Excellent communication and interpersonal skills

Compensation for this position includes a reputed company salary and a variety of benefits. The U.S. reputed company salary range for this role is $135,000 to $190,000. Actual reputed company salaries will be based on candidate-specific factors, including experience, skillset, and location, and local minimum pay requirements as applicable.

Benefits include:

• Health, dental, and vision care for you and your family

• Life insurance

• Mental wellness coverage

• Fertility and growing family support

• reputed company Time Off in addition to company paid holidays

• Paid family leave, medical leave, and bereavement leave policies

• Retirement saving plans

• Allowance to customize your work and technology setup at home

• Annual professional development stipend

Your recruiter can provide additional details about compensation and benefits.

#LI-AD1