Senior GRC Analyst

🔥 12 hours ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

🍂 Massachusetts – Remote

🍂 Massachusetts – Remote

💵 $120k - $150k / year

⏰ Full Time

🟠 Senior

🎲 Risk

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Shift Technology

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

🤖 Artificial Intelligence

🛡️ Insurance

☁️ SaaS

💰 $220M Series D on 2021-11

Artificial Intelligence • Insurance • SaaS

Shift Technology is a company that specializes in AI-driven solutions for the insurance industry. They offer a variety of products designed to optimize critical insurance decisions, with a focus on fraud detection, risk detection, and claims management. Leveraging deep insurance expertise and advanced artificial intelligence technology, Shift Technology helps major insurance providers across the globe improve decision-making accuracy and efficiency. Their solutions are highly reliable, secure, and capable of providing clear explanations for each decision made, supporting compliance efforts in areas like AML/KYC. Trusted by some of the top insurers worldwide, Shift Technology has established itself as a leader in the field of AI for insurance.

📋 Description

• Develop, maintain, and assess Shift’s integrated security and privacy management framework • Manage compliance with key industry standards • Lead risk assessments • Oversee the third-party security assurance program • Support TrustOps efforts for customer collateral, questions, contract reviews, and due diligence • Translate global information security expectations into actionable policies, standards, and procedures • Promote security and compliance across the organization and act as a subject matter expert • Support the security awareness program • Develop and maintain privacy policies, data handling standards, and public-facing privacy notices • Develop and maintain the security assurance plan and evaluate security controls • Improve third-party information security assurance and continuous assessment processes • Identify risk areas and facilitate security control evaluations and testing • Review architectural designs and new initiatives for security alignment and risk mitigation • Support and facilitate Data Protection Impact Assessments • Manage and coordinate ISO 27001 and SOC 2 Type II internal and external audits • Analyze and compile compliance documentation and evidence • Coordinate remediation of audit findings and track them to closure • Support responses to Data Subject Access Requests • Communicate with third parties and suppliers to conduct risk assessments, review security posture, and manage issue remediation • Report to the GRC Lead within the Information Security department

🎯 Requirements

• 7+ years of proven experience in a GRC, IT Audit, Security Assurance, or Information Security role • Bachelor’s Degree in a relevant field or equivalent work experience • Professional certifications such as CIPP/E, CIPP/US, CIPT, CISA, CISM, CRISC, or CISSP are highly desirable • Direct experience in highly regulated industries, i.e. financial services or healthcare • Direct experience managing or supporting formal audit and certification processes from start to finish • Deep knowledge of security and privacy frameworks, including ISO 27001, ISO 27701, SOC 2 Type II, HITRUST, and NIST CSF • Strong knowledge of global privacy and healthcare regulations, including GDPR and HIPAA • Working knowledge of AI regulations, frameworks, and standards, including EU AI Act and ISO 42001 • Working knowledge of business continuity, disaster recovery, and incident response planning • Hands-on experience with modern GRC management tools, preferably Drata • Exceptional communication and presentation skills • Strong stakeholder management skills • Strong project management skills and ability to manage multiple audits and assessments simultaneously • Analytical mindset and ability to balance regulatory requirements with business objectives

🏖️ Benefits

• Flexible remote and hybrid working options • Competitive Salary and a variable component tied to personal and company performance • Multiple Learning and Development opportunities, including Focus Fridays, a half-day each month to focus on learning and personal growth • Generous PTO and paid holidays • Mental health benefits • 2 MAD Days per year (Make A Difference Days for paid volunteering) • Additional benefits may be offered by country, based on your eligibility