Senior GRC Analyst (Cybersecurity)

TL;DR

Senior GRC Analyst (Cybersecurity): Driving the development and maturation of IT and security governance, risk, and compliance initiatives with an accent on policy lifecycle management, TPRM, and audit coordination. Focus on strengthening compliance posture, mapping security controls to operational processes, and ensuring alignment with regulatory mandates.

Location: Must be based in the U.S. (Atlanta, GA preferred)

Salary: $110,000 – $120,000

Company

A leading North American platform for Daily Fantasy Sports covering various leagues including NFL, NBA, and Esports.

What you will do

• Own the ongoing review and maintenance of organizational security policies, standards, and procedures.
• Coordinate with Legal, Regulatory Affairs, and Internal Audit to design and maintain a unified governance roadmap.
• Lead security risk assessments for new and renewing third-party vendors (TPRM).
• Coordinate annual security audits and certifications, including SOC 2, PCI, and CIS.
• Administer and improve the company’s security awareness and training program.
• Maintain and evolve risk and issue registries, tracking exceptions and risk owners.

Requirements

• 5+ years of experience in GRC, Information Security, or IT Audit.
• Experience with frameworks such as SOC 2, ISO 27001, SOX 404, PCI-DSS, NIST, GDPR, or CIS.
• Hands-on experience conducting Third-Party Risk Management (TPRM) assessments.
• Experience using GRC platforms to manage compliance, risk registers, and audit evidence.
• Must be authorized to work in the U.S. (No sponsorship available).

Nice to have

• Certifications such as CISSP, CISM, CISA, CRISC, or Security+.
• Familiarity with GRC tooling like Vanta, Drata, Archer, OneTrust, or ServiceNow.
• Experience scaling governance programs in high-growth technology or regulated environments.

Culture & Benefits

• Company-subsidized medical, dental, and vision plans.
• 401(k) plan with company match and annual bonus.
• Flexible PTO and generous paid parental leave (16 weeks).
• Workplace flexibility and modern schedules focused on delivery.
• Company equipment provided (Windows & Mac options).