Principal Security GRC Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Principal Security GRC Analyst based in the United States.

This is a senior individual contributor role responsible for strengthening and scaling a complex security governance, risk, and compliance program within a cloud-based technology environment.
You’ll take ownership of compliance initiatives from control design and implementation through evidence collection, audit preparation, and auditor engagement.
The role spans multiple frameworks, including FedRAMP Moderate, DoD IL5, CMMC Level 2, SOC 2 Type 2, ISO 27001:2022, TISAX, and related security requirements.
You’ll collaborate closely with security, IT, engineering, product, platform, and other teams to translate regulatory expectations into practical controls.
The position offers significant autonomy and the opportunity to lead long-term, cross-functional compliance programs while improving automation and operational maturity.
You’ll also interact with auditors, government stakeholders, customers, and internal leadership on high-impact security and compliance matters.
This is an ideal opportunity for an experienced GRC professional who enjoys solving complex problems, building scalable processes, and enabling innovation without compromising security or privacy.