Senior Governance, Risk, and Compliance Analyst

Job not on LinkedIn

🔥 0 minutes ago

⛷️ Utah – Remote

⛷️ Utah – Remote

⏰ Full Time

🟠 Senior

🚔 Compliance

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

RainFocus

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2013

☁️ SaaS

📣 Marketing

💰 Series C on 2021-09

SaaS • Marketing • Event Management

RainFocus is a comprehensive event marketing and management platform designed to elevate in-person, hybrid, and virtual event experiences. Utilizing personalized engagement and data-driven insights, RainFocus helps clients maximize brand identity and attendee interaction. Its integrated platform supports seamless registrations, content management, and attendee engagement across all events. With a strong emphasis on security and compliance, RainFocus is a trusted partner for organizations looking to optimize their event strategies and drive growth. The company also offers a range of on-site solutions and a mobile app to enhance event experiences and streamline operations.

📋 Description

• Own and grow RainFocus's governance, risk, and compliance program • Lead the GRC program across SOC 2, ISO 27001, PCI DSS, and other compliance frameworks, including audit preparation, evidence collection, and auditor relationships • Manage and mature the control framework, map new regulations, and conduct gap assessments • Own the annual security risk assessment process using NIST SP 800-30, including stakeholder interviews, risk scoring, and residual risk tracking • Maintain and update security policies, standards, and documentation • Partner with Engineering and Security to mature vulnerability management and secrets-scanning practices • Build and operationalize a Data Loss Prevention program across email, endpoints, and cloud storage • Grow the security awareness training program • Drive AI governance policy, tooling, and monitoring • Identify and help close Shadow IT and unmanaged SaaS visibility gaps with IT • Collaborate cross-functionally to implement risk management practices and ensure organizational compliance • Respond to security and privacy inquiries from clients, partners, and employees • Prepare and present security and privacy compliance reports, including program maturity and remediation progress • Monitor emerging security threats, vulnerabilities, and compliance requirements • Report directly to the CISO

🎯 Requirements

• Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable • 6+ years of experience in GRC, IT audit, information security compliance, or a related field • In-depth knowledge of SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and related frameworks • Experience running or substantially contributing to formal risk assessments • Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable • Familiarity with Drata, OneTrust, Vanta, or similar security tooling • Strong analytical and problem-solving skills • Excellent communication and interpersonal skills • Ability to manage multiple projects and meet deadlines in a fast-paced environment • Experience with cloud security and compliance frameworks is a plus • Experience with OneTrust or related GRC technologies is a plus • Strong work ethic and commitment to excellence • Ability to work independently and as part of a team • Ability to adapt to change and learn quickly • Passion for security and privacy

🏖️ Benefits

• Competitive salaries • Competitive benefits • 401k • Generous PTO • Team building activities