Security GRC & Risk Analyst

The Security GRC & Risk Analyst will own the governance, risk, and compliance execution layer across a holding company and its portfolio of businesses. This role is responsible for managing the SOC 2 Type II audit, NIST CSF remediation roadmap, security policy library, vendor risk program, and client-facing security questionnaires. The position involves collaborating with cybersecurity leadership, legal teams, and portfolio stakeholders to ensure technical controls and compliance frameworks are robust and audit-ready.