Intrado
• $115K — $140K *Qualifications
Responsibilities
Benefits
The Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject‑matter expert and operational lead for the organization’s information security governance, risk, and compliance programs. This role ensures alignment of security policies, standards, and controls with regulatory, contractual, and industry‑recognized frameworks, while supporting business partners in understanding and managing information‑security risk. The Lead GRC Analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due‑diligence requests. This position mentors other analysts, coordinates GRC workflows, facilitates cross‑functional decision-making, and drives continuous improvement in the organization’s risk management and compliance posture.
Governance and Policy Management
Lead development, review, and maintenance of information security policies, standards, and procedures.
Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls.
Ensure policies comply with regulatory, statutory, and contractual requirements.
Advise leadership on security governance best practices and control maturity.
Support communication and adoption of governance requirements across the organization.
Risk Management and Security Assessments
Lead enterprise Information Security risk assessments, including risk identification, analysis, and recommended treatment plans.
Evaluate risks across products, technologies, vendors, and operational processes; ensure alignment with organizational risk tolerance.
Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies.
Maintain risk registers, metrics, and reporting for leadership visibility.
Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology.
Compliance and Regulatory Support
Lead security compliance initiatives, including internal audits, external audits, SOC 2 readiness, and certification activities.
Coordinate evidence collection, control testing, documentation, and remediation tracking.
Ensure adherence to regulatory and contractual obligations relating to information security and privacy.
Partner with internal and external auditors to validate control effectiveness.
Security Questionnaires and External Requests
Oversee completion of customer security questionnaires, RFP responses, and client audits.
Ensure accuracy, consistency, and completeness of security representations provided to customers.
Manage documentation packages, including security overviews, policy references, and evidence artifacts.
Guide internal teams on compliance commitments and customer requirements.
Vendor and Third-Party Security Governance
Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements.
Support vendor risk classification, onboarding, and ongoing monitoring.
Ensure approved vendors adhere to security standards and contractual obligations.
Minimum Education:
Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or related field.
Minimum Experience:
5–7+ years of experience in Information Security governance, risk, compliance, or audit roles.
Experience supporting or leading security frameworks (e.g., NIST, ISO 27001, SOC 2).
Experience conducting risk assessments, managing policy programs, and participating in audits.
Experience working cross‑functionally with technical and non‑technical stakeholders.
Knowledge, Skills & Abilities:
Deep knowledge of governance, risk, and compliance frameworks (NIST CSF, ISO 27001, SOC 2, regulatory obligations).
Strong understanding of cybersecurity fundamentals, enterprise risk management, and control design.
Excellent ability to interpret and apply security requirements to business processes and technology landscapes.
Proficiency in assessing risk, evaluating controls, and documenting remediation plans.
Exceptional communication skills, including the ability to simplify complex security concepts for diverse audiences.
Strong organizational skills with the ability to manage multiple concurrent priorities.
High attention to detail, accuracy, and quality in documentation and evidence preparation.
Ability to influence stakeholders and guide decision‑making through expert‑level recommendations.
Travel Requirements:
May be required to travel up to 25% of the time depending on business needs.
Physical Requirements:
Position requires long periods of sitting, typing, and participating in phone or video calls.
Want to love where you work? At Intrado, we offer a comprehensive benefits package that includes what you’d expect (medical, dental, vision, life and disability coverage, paid time off, a 401(k) retirement plan, and several that go above and beyond – paid parental leave, access to a robust library of personal and professional training resources, employee discounts, critical illness, hospital indemnity, access to legal support, pet insurance, identity theft protection, an EAP (Employee Assistance Program) that includes free mental health resources/support, and more! Apply today to join us in work worth doing!
The starting salary is anticipated between $115,000 and $140,000 and will be commensurate with experience.
Our team will look into this right away.
