Build and improve company-wide security controls across cloud infrastructure, applications, identity, vulnerability management, detection, incident response, secure development, and AI systems. Review code and infrastructure as code, automate security workflows, manage vulnerabilities and incidents, conduct tabletop exercises, support audits, and communicate risk while partnering with engineering, IT Support, and GRC.

The GRC Analyst collects audit evidence, coordinates audits, tests controls, tracks findings, conducts access and inventory reviews, assesses vendor risk, responds to customer security questionnaires and RFPs, and administers policy lifecycles. The role also maintains questionnaire answer libraries and improves AI-assisted compliance workflows while partnering with control owners to resolve gaps and support customer trust.