MissionGroq is seeking a Senior Operational Risk and Reporting Analyst to build GRC risk reporting into a continuous operation that tells leadership a story in business impact terms rather than by control, and to own the third party risk program. You will turn a once-a-year risk exercise into a monthly operating rhythm, and track remediation across every framework in the program.
Responsibilities & opportunities in this role:- Build and run GRC risk reporting as a continuous operation: intake, scoring against the risk methodology, treatment tracking, and risk acceptance with owners and expiry dates; centralise risk data (register, KRIs, audit findings, critical vendors) into dashboards leadership can use.
- Produce the monthly risk report to security leadership, framed by business impact rather than control count, with executive-ready commentary.
- Own the third party risk program end to end: vendor tiering, security assessments on the cadence each tier requires, review of vendor SOC 2 and ISO reports, remediation tracking, and clearing the vendor assessment control in GRC tool.
- Track remediation across all frameworks so every open finding has an owner, a date and a disposition, and report aging monthly.
Ideal candidates have/are:- 5+ years in operational risk, IT risk or GRC, including building and running risk assessment and reporting processes end to end in a regulated environment.
- Experience producing monthly risk reporting for risk committees and executives.
- Experience testing controls for effectiveness, evaluating new initiatives for risk exposure before implementation, including third party risk assessments.
- Experience with GRC tooling preferred.
CompensationGroq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay. The total cash salary range for this position, which is inclusive of the potential bonus value, is $127,500-$172,500, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards. This range is specific to candidates located in the United States. Compensation for international candidates will vary based on local market dynamics. Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits.
US Job PostingThis position may require access to technology and/or information subject to U.S. export control laws and regulations, including the Export Administration Regulations (EAR). To comply with these requirements, candidates for this role must meet certain citizenship or residency criteria. Specifically, they must qualify as U.S. Persons for export control purposes (i.e., U.S. citizen, U.S. lawful permanent resident (Green Card holder), or a protected individual under 8 U.S.C. a7 1324b(a)(3) such as a refugee or asylee), or otherwise be eligible for an applicable export license.
Non-US Job PostingsThis position may require access to technology and/or information subject to U.S. export control laws and regulations, as well as applicable local laws and regulations, including the Export Administration Regulations (EAR). To comply with these requirements, candidates for this role must meet all relevant export control eligibility criteria.
