Grc Analyst Jobs

Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . Coinbase's Enterprise Risk Management team helps the company identify, understand, and manage risks that could affect our strategy, operations, and customers. As an Enterprise Risk Management Analyst, you'll sit at the intersection of risk, data, and strategy, supporting core ERM activities while using data and technology to make them more insightful and scalable. You'll analyze risk information, identify emerging risk patterns and signals, improve GRC data quality, support risk tooling and automation, and translate analysis into clear insights that help leaders make better risk-informed decisions. What you'll do: Analyze large, complex, and sometimes unstructured datasets to identify trends, anomalies, correlations, concentrations, and emerging enterprise risk signals. Build repeatable analytical methodologies, dashboards, metrics, and visualizations that improve how Coinbase understands and monitors enterprise risk. Connect information across risk assessments, incidents, KRIs, audit findings, regulatory developments, business performance, and external signals to develop an integrated view of risk. Investigate changes in risk indicators, challenge assumptions, identify underlying drivers, and distinguish meaningful signals from noise. Automate recurring analysis, data preparation, and reporting using SQL, Python, AI, and other available technologies. Partner across

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Senior Technology Risk Analyst Department: Data & Technology Solutions (DTS) Reports To: SVP Security and Compliance Location: [London/Hybrid 2 days a week in office] Position Type: Full-Time Role Purpose The Senior Technology Risk Analyst is responsible for managing and continuously improving the Information Security Management System (ISMS) across Data & Technology Solutions. You will ensure that security policies, controls, risks, exceptions, and governance processes are properly maintained, evidenced, reviewed, and acted upon. Reporting to the SVP Security and Compliance, you will provide the operational backbone for security governance across DTS. This is a hands-on Governance, Risk, and Compliance (GRC) role. You will collaborate across security, product, engineering, infrastructure, architecture, legal, risk, compliance, and delivery teams to transform security governance into a dynamic, working management system rather than a static documentation exercise. Key Responsibilities 1. ISMS Ownership & Operation Manage the day-to-day opera

Perplexity is seeking a highly experienced Governance, Risk & Compliance Analyst to join our world-class team. You will help shape our compliance and risk management program. If you are a self-motivated, organized professional with a passion for driving compliance and building customer trust, this is an exciting chance to join a fast-growing startup and help revolutionize the way people search and interact online. What You'll Do Implement and lead frameworks such as SOC2, ISO 27001 and HIPAA. Ensuring compliance with certification requirements Ensure and maintain compliance with GDPR, CCPA, CPRA and other privacy regulations Design and build scalable audit management processes and documentation systems that will support future expansion to additional compliance frameworks Build internal GRC platform and tooling Conduct risk assessments and mitigate data security and compliance risks Write, update and enact policies capturing security, privacy, and AI safety requirements Follow and help shape the AI regulatory and standards landscape to keep the company at the forefront of industry developments and best practices What You'll Bring 6+ years of experience leading engagements in audit and compliance Experience translating complex compliance requirements into scalable automation using AI agents and custom built tooling Worked in high tech companies in cloud-native environments Able to translate complex compliance requirements into clear and actionable work-streams Strong commitment to cross-functional collaboration with IT, Security, GTM, and Engineering Self-motivated, detailed and organized, with a diligent approach to project completion Excellent written, verbal, and interpersonal communication skills

About the Team DoorDash’s Global Governance, Risk and Compliance (GRC) team helps the business scale securely through practical risk-based decisions, reliable controls and clear accountability. Our third-party risk program protects the systems and data behind our marketplace across DoorDash, Wolt, and Deliveroo. About the Role We’re looking for a Third-Party Risk Management (TPRM) Manager to lead a technically rigorous global program and shape its AI-native future. You will own the vendor security risk lifecycle, lead complex assessments of integrations with our most critical systems and data, and develop a team that makes clear, evidence-based risk decisions. You will also set the vision and build practical agentic workflows that improve how we gather evidence, assess risk, and follow through on remediation. Reporting to the Global Head of GRC, you will serve as their US-based deputy and provide GRC leadership and escalation coverage during US business hours. You will directly manage TPRM analysts together with other US-based GRC team members assigned to your organization. This role combines hands-on technical judgment, program ownership and people leadership. You will be based in the United States, preferably within the Eastern or Central timezones, with core working hours aligned to US business needs and clear handoffs with global colleagues. What you will do Run the day-to-day TPRM program operations from vendor discovery and risk tiering through due diligence, onboarding, continuous monitoring, remediation and exit. Maintain a reliable vendor inventory, policies, assessment standards, and service levels across DoorDash, Wolt, and Deliveroo, covering cloud, SaaS, business process outsourcing (BPO), and other critical suppliers. Lead assessments of vendors connected to crown jewel systems, including identity platforms, production cloud, source code and CI/CD, and sensitive-data platforms. Examine architecture, data flows, permissions, and control evidence. Use st

As the Engineering Manager for Commercial Audit, you will lead a high-performing team responsible for scaling Datadog’s security and compliance posture through automation, tooling, and engineering excellence. Our GRC (Governance, Risk, and Compliance) function is a critical partner to the broader Security and Engineering organizations, ensuring that Datadog not only meets rigorous global regulatory standards but does so in a way that is efficient, scalable, and integrated into our cloud-native infrastructure. You will manage a team of engineers and analysts who are transitioning to a GRC engineering direction to treat compliance as a software problem, leveraging AI, custom tooling, CI/CD pipelines, and cloud-native services to turn complex regulatory requirements into actionable, automated controls. You will lead the strategy, roadmap, and execution of Datadog’s Commercial Audit initiatives. This is a high-impact leadership role where you will grow a team of engineers and analysts responsible for directly maintaining our compliance programs and related audits (e.g., SOC2, PCI, HIPAA, ISO) while looking to improve efficiency and effectiveness through platforms and tooling. You will act as a bridge between technical engineering, legal, and compliance, enabling the organization to move fast while maintaining a secure and compliant environment. You will champion a culture of "compliance-as-code," identifying opportunities to automate evidence collection, streamline control testing, and reduce manual toil for both your team and our partner engineering teams. At Datadog, we place value in our office culture - the relationships and collaboration it builds, and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: Lead the strategy, roadmap, and execution of Datadog’s commercial security compliance efforts, shifting from manual audit processes to automated, scalable

Who Are We HALA is a leading fintech player in the MENAP region that aims to redefine financial services and build the future bank of SMEs. HALA aims at empowering SMEs to start, run, and grow their businesses by providing them with cutting-edge financial and technological tools. HALA currently holds multiple entities in UAE, Saudi Arabia and Egypt (including HALA Payments and HALA Logistics) and offers solutions that enable merchants to digitize their payments as well as manage their sales and operations. Founded in 2017, HALA is currently licensed by the Saudi Arabian Central Bank. Responsibilities Governance & Strategy: Develop, implement, and continuously improve the organization's Information Security Governance framework, policies, standards, and procedures. Lead the creation and execution of the Cyber Security Strategy in alignment with the company's overall business goals. Providing regular reports to the Board of Directors and executive management on the state of cybersecurity. Establish and manage a security metrics and Key Performance Indicator (KPI) program to measure the effectiveness of the security program and report on progress. Oversee the information security budget, ensuring resources are allocated effectively to manage risk. Risk Management: Design and manage a comprehensive enterprise-wide Cyber Security Risk Management program. Conduct regular risk assessments, including Business Impact Analysis (BIA), to identify, analyze, and evaluate information security risks. Facilitate risk treatment planning with business and technology owners, ensuring appropriate mitigation, acceptance, or transfer strategies are implemented. Manage the vendor risk management program, assessing the security posture of

About the opportunity Are you ready to take the next step in your career? As an ICT GRC - Risk & Compliance Manager, you will play a pivotal role in shaping how we manage IT risks in an increasingly AI-driven financial landscape. In this role, you’ll be at the forefront of risk management and compliance, ensuring our IT systems remain secure, resilient, and aligned with evolving regulations. You’ll work closely with tech, security, and compliance teams to strengthen risk frameworks, enhance resilience, and drive smarter decision-making. As AI and automation become essential in risk management, you’ll help explore and implement automation and AI-driven solutions to improve risk assessments, identify emerging threats, and streamline compliance processes. This is an opportunity to not just keep up with change, but to help shape it. If you're looking for a role where AI, automation, and ICT Risk and compliance intersect, and where your expertise can have a real impact, this is it. In this role you will Function as a key member of the bank's risk function (Second Line of Defense), reporting directly to the Deputy CISO and maintaining close collaboration with First Line of Defense teams on matters of ICT risk management. Actively engage in the ICT Risk Management process, encompassing proactive risk assessment, analysis, treatment plan identification, mitigation, and ongoing monitoring. Drive the maturity of the ICT Risk Management framework in adherence to DORA act. Proactively conduct risk assessments to identify ICT risks within the bank's IT infrastructure and propose appropriate mitigation strategies. Collaborate with cross-functional teams, including product, technology, security, and other First Line of Defense teams, to identify and implement risk treatment plans. Maintain the ICT risk register, ensuring the accuracy and completeness of ICT risks. Proactively report progress and updates to the team, providing detailed reports and presentations on the status of

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Standort : Frankfurt am Main, Düsseldorf, Berlin, München (Hybrid) | Practice Area: Finance, Risk, Regulatory & Financial Crime | Anstellungsart : Unbefristet Gestalte die Zukunft des Risiko- und Compliance-Managements – mit ServiceNow, intelligenten Workflows und innovativen Technologien. Die Rolle Als Senior Consultant* / Manager* – ServiceNow Specialist (GRC / IRM) bei Capco unterstützt du führende Banken, Asset Manager und Versicherungen bei der Konzeption, Transformation und Implementierung moderner Risiko- und Compliance-Prozesse auf Basis der ServiceNow-Plattform. Du berätst unsere Kunden an der Schnittstelle zwischen Fachbereich und Technologie und entwickelst gemeinsam mit Verantwortlichen aus Risikomanagement, Compliance und IT zukunftsfähige Prozess- und Systemlandschaften. Dabei analysierst du bestehende Governance-, Risk- und Compliance-Strukturen, konzipierst skalierbare Zielarchitekturen und begleitest deren fachliche und technische Umsetzung. Du nutzt moderne Automatisierungsansätze und freigegebene KI-Technologien, um Prozesse effizienter zu gestalten, fundierte Entscheidungen zu unterstützen und die Qualität von Risiko- und Compliance-Lösungen kontinuierlich zu verbessern. Dabei berücksichtigst du regulatorische Anforderungen, nachvollziehbare Kontrollmechanismen und die notwendige menschliche Überprüfung KI-gestützter Ergebnisse. In interdisziplinären Projektteams übernimmst du Verantwortung für anspruchsvolle Transformationsvorhaben und gestaltest die Weiterentwicklung unserer ServiceNow-GRC-/IRM-Kompetenzen aktiv mit. Deine Aufgaben Du analysierst bestehende Governance-, Risk- und Compliance-Prozesse und entwickelst maßgeschneiderte ServiceNow-GRC-/IRM-Lösungen für Banken, Versicherungen und Asset Manager – von der strategischen Zielsetzung bis zur erfolgreichen Implementierung. Du konzipierst skalierbare Workflows, Datenmodelle und Steuerungsmechanismen für Operational Risk, IT Risk, Third-Party Risk Management, Compliance, In

Role Overview Help organizations turn governance, risk, and compliance (GRC) goals into measurable business value. As a Client Success Advisor, you’ll guide key clients in configuring, adopting, and optimizing a GRC platform—strengthening retention, uncovering expansion opportunities, and helping teams work more effectively. You’ll combine GRC expertise, advisory skills, and a strong understanding of client needs to shape practical solutions, improve platform usage, and build lasting partnerships. Your work will influence client outcomes while contributing valuable insights to internal product and go-to-market teams. Here’s a breakdown of what you’ll do (not all of it, just the important stuff) Advise clients on configuring, customizing, and optimizing GRC platform functionality to support their business processes and objectives. Assess client requirements, challenges, and goals, then recommend tailored solutions that deliver measurable value. Partner with clients on governance, risk, and compliance roadmaps, translating priorities into effective platform implementations. Drive adoption across the platform and its modules, identifying engagement risks and helping clients increase usage. Help clients identify and implement practical analytics use cases that improve automation, exception management, and reporting. Collaborate with Product, Customer Success, Support, and Sales teams to improve solutions based on real-world client needs. Monitor regulatory developments, industry trends, and emerging GRC best practices to provide proactive, trusted advice. These are the essentials you’ll need to get an interview 5–7 years of experience in a client-facing role within audit, risk, compliance, or a related GRC environment. Strong knowledge of GRC concepts, regulations, industry standards, and software platforms. Experience translating audit, risk, compliance, or business questi

Location: New York City or San Francisco - 4 days in office About the Role We are looking for a highly technical Senior Security Engineer who is passionate about protecting data across modern SaaS, cloud, endpoint, and analytics environments. This role is ideal for someone who enjoys solving complex data security challenges through engineering, automation, and AI rather than relying solely on commercial tools. You will help build, scale, and continuously evolve Sigma’s data security capabilities across SaaS applications, cloud platforms, endpoints, collaboration tools, AI systems, and data warehouses. You will be joining a dynamic and highly technical Security Engineering team at Sigma. This is a hands-on engineering role for builders, innovators, and problem-solvers who want to create scalable security solutions that protect the organization's most critical asset - data. What You'll Do Design, build, and maintain security platforms, services, APIs, automation, and internal tooling that protect Sigma's data across cloud, SaaS, endpoint, and analytics environments. Develop scalable solutions for data discovery, classification, governance, access controls, monitoring, and protection using modern engineering practices and automation. Build and mature capabilities around CASB, DLP, DSPM, SSPM, insider risk, and data access governance to reduce the risk of unauthorized access, sharing, or exposure of sensitive information. Build and maintain DLP controls and tooling across multiple cloud, OS environments and decentralized datasets, implementing and tuning prevention capabilities that protect against sophisticated data security incidents. Drive automation across DLP engineering and operations by leveraging LLMs, agentic AI, and an automation-first mindset to streamline workflows, reduce manual effort, and scale data protection coverage. Design and implement security controls across SaaS applications, collaboration platforms, endpoints, and business-critical

Job Summary: We are seeking an experienced and highly analytical professional to join our Internal Audit team. This role is critical in providing independent assurance, enhancing the control environment, and leveraging data analytics to identify anomalies, control gaps, and potential fraud risks. The ideal candidate will have a strong background in internal audit, forensic investigations, and data analytics with extensive exposure to fintech or large service-based organizations. Key Responsibilities:  Lead and execute risk-based internal audits, including operational, financial, and compliance reviews.  Design and implement data analytics frameworks and continuous auditing techniques to enhance audit efficiency and coverage.  Conduct forensic reviews and investigations into suspected fraud, misconduct, or control failures.  Collaborate with cross-functional teams to understand key business processes and identify risks and controls.  Develop automated dashboards and data-driven tools to monitor key risk indicators and red flags.  Report audit findings to senior management and stakeholders with actionable recommendations.  Oversee documentation of working papers, audit procedures, and evidence in line with professional standards.  Mentor junior audit staff and build analytics capability within the team.  Liaise with external auditors, regulators (as needed) on investigations or audits.  Monitor regulatory and industry developments to ensure audit approaches are up to date. Required Qualifications ; Skills:  Chartered Accountant (CA), Certified Internal Auditor (CIA), or Certified Fraud Examiner (CFE) preferred.  2–7 years of relevant experience in internal audit, forensic investigations, or risk advisory in a fintech, BFSI, or large service industry setup.  Strong command of data analytics tools (e.g., SQL, ACL, IDEA, Power BI, Python, R).  Proficient in audit management systems and GRC platforms.  Exceptional analytical, investigative, and report-w

For over 20 years, Smartsheet has empowered teams to manage work seamlessly and scale solutions smarter. Now, in our most ambitious chapter yet, we are uniting human teams with AI agents. By orchestrating the work agents do best, automating manual tasks and uncovering insights at scale, we create the space for people to focus on what truly matters: judgment, creativity, and big thinking. That is magic at work, and it’s what we show up for every day. Smartsheet needs a clear, defensible answer to "how risky is this?" for the risks that live inside our own environment and the risks that come in through every vendor and partner we rely on. We're looking for a Sr. Security Engineer I to own our Security Risk Management program end-to-end—running risk identification, analysis, and quantification; maintaining the enterprise risk register; and driving mitigation strategies that leadership can act on—while also overseeing our Third-Party Risk Management (TPRM) function. You don't need to be a hands-on security engineer to succeed here: you need to understand our technology and architecture well enough to have a real conversation with engineering teams about their risk exposure, and you need the judgment and communication skill to turn technical risk into business language that drives decisions. This role sits at the center of how Smartsheet decides what to fix first, what to accept, and what a vendor relationship is actually costing us in risk. This role reports to the Senior Director, GRC Engineering and can be based in our Bellevue, WA office or remotely from anywhere in the US where Smartsheet is a registered employer. You Will: Own and mature Smartsheet's Security Risk Management program: risk identification, analysis, scoring, and quantification (e.g., FAIR-based or similar) across internal systems, third parties, and emerging initiatives. Maintain the enterprise risk register—ratings, ownership, mitigation status, and residual risk—and drive it toward a living, decisi