Search Jobs
Find your next opportunity today.
Sr. Analyst, IT Security, Risk & Compliance
Employment Type:
Perm
Job Number: 25881
Remote Options: Hybrid
Job Description
Sr. Analyst, IT Security, Risk & Compliance
Irvine, CA | Hybrid – 2 days/week onsite | $125K–$135K + 10% bonus
We’re looking for a hands-on IT Security, Risk & Compliance professional to join a fast-growing, consumer-focused company that is actively building and maturing its security program.
This is a great opportunity for someone who wants real ownership and impact. The security/GRC framework is being built today, so you’ll have the opportunity to come in during the implementation phase and help turn the framework into a practical, operational security program.
What You’ll Do
This isn't a role where you'll simply maintain someone else's mature security program.
The company is actively building its security/GRC framework, giving you the opportunity to help establish how the program operates, take ownership of the controls and processes, and play a meaningful role in its continued maturity.
You'll also work in a highly cloud-based, technology-driven environment with significant exposure to third-party technology and security partners and a global parent organization.
If you're a security/GRC professional who enjoys ownership, problem-solving and building something rather than simply maintaining it, this could be an excellent opportunity.
Â
Irvine, CA | Hybrid – 2 days/week onsite | $125K–$135K + 10% bonus
We’re looking for a hands-on IT Security, Risk & Compliance professional to join a fast-growing, consumer-focused company that is actively building and maturing its security program.
This is a great opportunity for someone who wants real ownership and impact. The security/GRC framework is being built today, so you’ll have the opportunity to come in during the implementation phase and help turn the framework into a practical, operational security program.
What You’ll Do
- Own the day-to-day operation and execution of the IT security and GRC program.
- Operate and maintain the company’s ISMS, security controls, risk register, compliance activities and control calendar.
- Coordinate and execute control testing, access reviews, assessments and audit-readiness activities.
- Gather and validate audit evidence, maintain documentation and drive findings through remediation and closure.
- Investigate and coordinate the response to security incidents, vulnerabilities, access issues and security findings.
- Work closely with internal stakeholders, third-party security partners, vendors and the company’s global parent organization.
- Develop and maintain security policies, SOPs, playbooks, control narratives and other security documentation.
- Track security awareness, phishing education, compliance activities, remediation and overall security program health.
- Identify opportunities to improve and mature the security program over time.
- 5+ years of experience in IT Security, GRC, Information Security, Security Compliance or a related area.
- Hands-on experience with security controls, audits, risk assessments, compliance, remediation and control testing.
- Experience with one or more frameworks such as ISO 27001, NIST, SOC 2 or SOX ITGC.
- Strong understanding of Microsoft 365, Entra ID/Azure AD, endpoint management, IAM, cloud security and security operations.
- Experience investigating or coordinating security incidents and vulnerability remediation.
- Strong documentation, organization, communication and follow-through skills.
- Someone who can work independently, navigate ambiguity and figure things out without needing constant direction.
This isn't a role where you'll simply maintain someone else's mature security program.
The company is actively building its security/GRC framework, giving you the opportunity to help establish how the program operates, take ownership of the controls and processes, and play a meaningful role in its continued maturity.
You'll also work in a highly cloud-based, technology-driven environment with significant exposure to third-party technology and security partners and a global parent organization.
If you're a security/GRC professional who enjoys ownership, problem-solving and building something rather than simply maintaining it, this could be an excellent opportunity.
Â
Share This Job:
Related Jobs:
Login to save this search and get notified of similar positions.About Irvine, CA
Take the next step in your career journey in the vibrant city of Irvine, California! Nestled in the heart of Orange County, this thriving community offers unparalleled growth opportunities and an unbeatable quality of life. With its close proximity to stunning beaches, world-class shopping at South Coast Plaza, a bustling culinary scene featuring diverse cuisine options, and cultural attractions like the Irvine Museum and Irvine Barclay Theatre, Irvine has something for everyone. Whether you're into outdoor activities in Irvine Regional Park or catching a game at the Angel Stadium of Anaheim or the Honda Center, this region has it all. Explore our job listings today and discover why Irvine is the perfect place to advance your career!