Senior GRC Compliance Analyst - Continuous Compliance Framework

Summary

The Senior GRC Compliance Analyst leads the maturation and operation of the Continuous Compliance Framework, including control design, testing, and automation. This hybrid role partners across governance, risk, business, and technology teams to strengthen compliance and support audits.

Responsibilities

• Manage and configure the Common Control Framework in the GRC tool, including control ownership, testing schedules, and evidence requirements.
• Develop control RACI models, KPIs, KRIs, and reusable testing methods.
• Evaluate and implement AI and automation solutions for evidence collection and control testing.
• Integrate compliance activities with governance and risk programs, and support PCI assessments and other audits.
• Lead stakeholder workshops and communicate compliance program health to leadership.

Requirements

• 4-6 years of regulatory compliance experience and direct experience building or managing a Continuous or Common Control Framework.
• Experience with GRC tools, control testing, AI or automation, and developing compliance KPIs and KRIs.
• Knowledge of frameworks including NIST, CIS, SOX, HIPAA, CCPA, and PCI DSS.
• Bachelor's or master's degree in a related field, or equivalent work experience.