Senior GRC Analyst - Entrata

Lead policy development, internal audits, and process improvement initiatives to support compliance with industry standards and regulatory frameworks, including SOC 2, PCI DSS 4.0, and ISO 27001.

Execute and document internal control testing across IT, security, cloud, and business/operations processes.

Identify root causes of control deficiencies, audit findings, and non-conformities, and recommend appropriate corrective actions and remediation plans.

Conduct interviews, walkthroughs, and compliance assessments with stakeholders to evaluate adherence to internal policies and external regulatory requirements.

Monitor and assess cloud environments, including GCP, AWS, and ERP systems, to validate security controls and risk management practices.

Analyze and summarize audit findings, risk exposures, and control testing results for presentation to leadership and key stakeholders.

Assist in third-party risk assessments and vendor compliance reviews to ensure alignment with security and regulatory standards.

Collaborate cross-functionally to enhance GRC frameworks, policies, procedures, and internal control environments.

Identify opportunities for process optimization and contribute to the development and implementation of best practices.

Manage multiple priorities and projects independently while meeting deadlines in a fast-paced, dynamic environment.

Maintain professional and effective communication with internal and external stakeholders throughout audits, assessments, and remediation efforts.

Bachelor’s degree in Accounting, Finance, Information Systems, or a related field.

Minimum of 5 years of experience in governance, risk, compliance (GRC), IT audit, security compliance, or a related field.

Proficiency in GRC concepts, IT audit methodologies, and regulatory frameworks such as SOC 2, PCI DSS 4.0, and ISO 27001.

Demonstrated experience leveraging AI-powered tools or automation to improve audit, compliance, security, or operational workflows, with familiarity evaluating risks associated with AI-enabled systems and processes.

Strong analytical and problem-solving skills, with the ability to evaluate audit findings, identify root causes, and recommend remediation strategies.

Ability to work independently, manage competing priorities, and consistently meet deadlines in a fast-paced environment.

Strong written and verbal communication skills, with the ability to clearly present findings, risks, and recommendations to technical and non-technical stakeholders.

Professional certifications such as CISA, CISSP, CRISC, or equivalent.

Experience working in SaaS environments with a focus on IT risk, compliance, or security governance.

Experience with cloud platforms and enterprise systems, including GCP, AWS, and cloud-based ERP environments.

Familiarity conducting audits or compliance assessments within regulated or security-focused environments.