Sr. Compliance Analyst

Actively Reviewing the Applications

Grazitti Interactive

4–8 years

Posted 2 days ago • Apply by June 11, 2026

Job Description

Job Description

We’re looking for a highly motivated and detail-oriented Sr. Compliance Analyst to join our Information Security Group (ISG) at Grazitti Interactive. In this role, you’ll drive governance, risk, and compliance (GRC) initiatives, support audits, enhance policy frameworks, and contribute to the organization’s overall information security posture.

If you have a solid background in GRC frameworks, risk management, and regulatory compliance, and enjoy working cross-functionally to build a culture of trust and accountability, this role is a great fit for you.

Key Skills

5+ years of experience in GRC, compliance, or related fields.
Bachelor’s degree in a relevant field; certifications like CRISC, CISM, CISSP, PMP, or Scrum Master are a strong plus.
Deep understanding of frameworks such as ISO27001, ISO27701, ISO31000, NIST, COSO, COBIT, and ITIL.
Strong knowledge of global regulations, including GDPR, CCPA, HIPAA, and ITGC.
Proven experience in risk assessment and mitigation strategies.
Hands-on experience with audit planning, execution, and documentation.
Proficiency in developing and implementing information security policies.
Strong analytical, communication, and stakeholder management skills.

Roles and Responsibilities

Develop, implement, and refine GRC strategy in alignment with business objectives.
Monitor organizational compliance with laws, regulations, and industry standards.
Participate in risk assessments and recommend risk mitigation strategies.
Support and contribute to security incident response and resolution.
Assist in drafting and enforcing information security policies and procedures.
Collaborate with external auditors for compliance and control assessments.
Conduct internal audits to evaluate the effectiveness of controls and processes.
Manage documentation, training, and awareness programs to promote a compliance culture.
Provide regular updates to leadership and stakeholders on GRC metrics and initiatives.
Continuously improve GRC practices based on audit feedback and regulatory changes.