Senior Analyst, GRC - Remote (Cybersecurity)

Location: Remote from an approved city and state in the United States; listed office location: Tempe, Arizona

Company

hirify.global Family of Brands operates in used-car sales financing, vehicle servicing, and protection through hirify.global, Bridgecrest, and SilverRock.

What you will do

• Lead Information Security risk assessments, cyber risk management activities, scoring, treatment planning, documentation, tracking, and reporting.
• Perform compliance monitoring and control assessments against policies, standards, frameworks, contracts, and regulatory requirements.
• Support policy governance, audit evidence collection, remediation tracking, and third-party security assessments.
• Develop risk statements and practical treatment recommendations for management decision-making.
• Coordinate security due diligence questionnaires, insurance inquiries, and external security assessments.
• Maintain GRC methodologies, metrics, policy lifecycles, security awareness initiatives, and continuous improvement activities while mentoring analysts.

Requirements

• 4+ years of experience in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or a related field.
• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, Audit, or a related discipline, or equivalent experience.
• Experience independently conducting risk assessments, evaluating controls, documenting findings, and developing remediation or risk treatment recommendations.
• Experience improving GRC processes, methodologies, workflows, and enabling technologies.
• Familiarity with the NIST Cybersecurity Framework and Information Security risk and control concepts.
• Must work from a home office in an approved US city and state.

Nice to have

• Experience with NIST 800-53, PCI DSS, SOC reporting, GLBA/FTC Safeguards Rule, or state privacy and security regulations.
• CISSP, CISA, CRISC, Security+, or similar certification.
• Experience with third-party risk management, security awareness, privacy initiatives, technology audits, or regulated environments.
• Exposure to security governance, policy management, and enterprise risk reporting.

Culture & Benefits

• Work-from-home arrangement with a quiet, secure workspace and reliable internet.
• Medical, dental, and vision insurance with employer premium contributions.
• 401(k), company-paid life insurance, and short- and long-term disability coverage.
• Paid time off, wellness days, holidays, and professional growth opportunities.
• Tuition reimbursement and a wellness program with coaching, incentives, and premium discounts.

Hiring process

• Employment is contingent on successful completion of background and drug screening.
• hirify.global is a drug-free, tobacco-free workplace and an equal opportunity employer.