Lead Governance Risk & Compliance Analyst

Location: Hybrid in Longmont, Colorado, United States; travel may be required up to 25% of the time depending on business needs.

Starting salary: $115,000–$140,000 per year, commensurate with experience.

Company

hirify.global helps communities prepare for, respond to, and recover from critical events by uniting fragmented communications into actionable intelligence for first responders.

What you will do

• Lead the development, review, maintenance, and adoption of information-security policies, standards, procedures, and governance processes.
• Lead enterprise information-security risk assessments across products, technologies, vendors, and operational processes; maintain risk registers, metrics, and leadership reporting.
• Guide Product, Engineering, Legal, Operations, and other stakeholders on risk treatment, control maturity, security requirements, and mitigation strategies.
• Lead internal and external audit activities, SOC 2 readiness, certification work, evidence collection, control testing, documentation, and remediation tracking.
• Oversee customer security questionnaires, RFP responses, client audits, and related security documentation and evidence packages.
• Lead vendor security risk assessments, classification, onboarding, monitoring, and compliance with security standards and contractual requirements; mentor analysts and coordinate GRC workflows.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or a related field.
• 5–7+ years of experience in information-security governance, risk, compliance, or audit roles.
• Experience supporting or leading security frameworks such as NIST, ISO 27001, and SOC 2.
• Experience conducting risk assessments, managing policy programs, and participating in audits.
• Experience working cross-functionally with technical and non-technical stakeholders.
• Deep knowledge of governance, risk, and compliance frameworks, including NIST CSF, ISO 27001, SOC 2, and regulatory obligations.
• Strong understanding of cybersecurity fundamentals, enterprise risk management, and control design.
• Ability to interpret and apply security requirements to business processes and technology landscapes; assess risk, evaluate controls, and document remediation plans.
• Exceptional communication, organizational, documentation, prioritization, accuracy, attention-to-detail, stakeholder-influence, and expert recommendation skills.

Culture & Benefits

• Hybrid work environment in Longmont, Colorado.
• Medical, dental, vision, life, disability, and paid time-off benefits.
• 401(k) retirement plan and paid parental leave.
• Personal and professional training resources, employee discounts, legal support, pet insurance, identity-theft protection, and an employee assistance program with mental-health resources.
• Physical work includes extended periods of sitting, typing, and participating in phone or video calls.