Senior GRC Analyst

Job not on LinkedIn

🔥 4 minutes ago

🇭🇺 Hungary – Remote

⏰ Full Time

🟠 Senior

🎲 Risk

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GoTo

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2000

💼 Consulting

🏥 Healthcare

⚖️ Legal

💰 Seed Round on 2013-11

Consulting • Healthcare • Legal

GoTo is a company offering all-in-one business communication and remote IT management solutions. Their product lineup includes GoTo Connect, an all-in-one communication platform providing features like cloud-based phone systems, digital channels, and AI-powered contact centers designed to improve customer experiences. Additionally, GoTo offers IT management and support services like remote access, mobile device management, and IT asset management to enhance enterprise productivity and security. They cater to various industries, such as healthcare, legal, education, and professional services, ensuring seamless communication and IT support from any location on any device.

📋 Description

• Coordinate audits across ISO 27001, SOC 2, PCI DSS, HIPAA, NIS2, SOX, and C5 • Manage auditor relationships • Drive evidence collection and track remediation activities to completion • Perform control assessments and testing across technical and administrative domains • Partner with engineering and security teams to evaluate control design and effectiveness • Collaborate with Engineering, Security, IT, and Product stakeholders to understand technical architectures • Translate technical architectures into audit-ready control narratives • Leverage AI tools, automation, and emerging technologies to streamline evidence collection, control testing, and reporting • Administer and enhance GRC platforms • Develop metrics and dashboards providing visibility into compliance posture and control effectiveness

🎯 Requirements

• 4+ years of experience in information security compliance, audit, or risk management within a technology environment • Strong understanding of cloud architecture, IAM, infrastructure, and SDLC controls • Experience working with one or more compliance frameworks, such as ISO 27001, SOC 2, PCI DSS, HIPAA, NIST 800-53, or NIS2 • Strong audit communication skills, including managing auditors, evaluating evidence requests, and defending control positions • Active use of AI tools to improve productivity • Experience with compliance automation, continuous monitoring initiatives, or GRC platform development (bonus) • Experience with Thoropass, AuditBoard, or Drata (bonus) • Experience building AI-driven workflows or automations (bonus) • Experience integrating GRC tooling with engineering, cloud, identity, or monitoring platforms (bonus) • Experience implementing continuous assurance capabilities (bonus)

🏖️ Benefits

• Comprehensive health benefits • Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days • Tuition reimbursement • Instructor-led and on-demand learning and development programs • The Thrive Global Wellness Program • Confidential Employee Assistance Program (EAP) • Wellness app and one-on-one wellness coaching • Employee Resource Groups (ERGs) • GoTo Gives • Charitable matching • Flexible work arrangements, including working from home