Senior GRC Analyst
你将在哪里工作：远程 （匈牙利）GoTo 安全 每个人都应该在一个安全和安全的环境中工作。这就是为什么我们热衷于提供安全，远程员工产品和服务，优先考虑保护业务资产，客户数据和员工信息。我们致力于创造不仅安全的产品，而且也是用户友好和可访问的产品。我们仔细地将人工智能注入我们的工具中，利用它作为一种强大的资源来提供真正的实用价值并解决实际的安全挑战。加入我们帮助创建未来，安全与简单性和人工智能驱动的创新相遇。你的一天到一天力量 合规分析师是安全治理，风险和合规 (GRC) 团队成员，向 CISO 组织的 GRC 主任报告。你将拥有审计协调，控制测试和风险评估工作，同时积极改善通过技术和自动化进行保证的方式。作为 GRC 合规分析员，你将在：· ISO 27001,SOC 2,PCI DSS,HIPAA,NIS2,SOX 和 C5中协调审计，包括管理审计关系，驱动证据收集和追踪补救活动到完成。· 开展技术和行政领域的控制评估和测试，与工程和安全团队合作评估控制设计和效率。· 与工程，安全，IT 和产品利益相关者合作了解技术架构并将其转化为准备审计的控制叙述。·利用人工智能工具，自动化和新兴技术来简化证据收集，控制测试和报告活动。·管理和增强 GC 平台，同时开发衡量表格和仪表板，可提供对合规姿势和控制效果的见解。我们正在寻找什么？· 在技术环境中，在信息安全合规，审计或风险管理方面有4年以上经验。· 强大的了解云架构，IAM,基础设施和 SDLC 控制，使得与技术团队进行有效的协作和通信。· 与 ISO 27001,SOC 2,PCI DSS,HIPAA,NIST 800-53或 NIS2等一个或多个合规框架工作经验。• 强大的审计沟通技能：你知道如何管理审核人员，当证据请求不适用时反击并捍卫对方的控制位置。· 有力用户
查看英文原文
Where you’ll work:
Remote (Hungary)Security at GoTo
Everyone deserves to work in a safe and secure environment. That's why we're passionate about delivering secure, remote workforce products and services that prioritize the protection of business assets, customer data, and employee information. We're committed to creating products that are not only secure but also user-friendly and accessible to all.
We thoughtfully infuse AI into our tools, leveraging it as a powerful resource to deliver genuine, practical value and address real security challenges. Join us and help create a future where security meets simplicity and AI-powered innovation.
Your Day to Day
The Compliance Analyst sits within the Security Governance, Risk, and Compliance (GRC) team, reporting to the Director of GRC in the CISO org. You'll own audit coordination, control testing, and risk assessment work while actively improving how assurance gets done through technology and automation.
As a GRC Compliance Analyst, you'll be working on:
- Coordinating audits across ISO 27001, SOC 2, PCI DSS, HIPAA, NIS2, SOX, and C5, including managing auditor relationships, driving evidence collection, and tracking remediation activities to completion.
- Performing control assessments and testing across technical and administrative domains, partnering with engineering and security teams to evaluate control design and effectiveness.
- Collaborating with Engineering, Security, IT, and Product stakeholders to understand technical architectures and translate them into audit-ready control narratives.
- Leveraging AI tools, automation, and emerging technologies to streamline evidence collection, control testing, and reporting activities.
- Administering and enhancing GRC platforms while developing metrics and dashboards that provide visibility into compliance posture and control effectiveness.
What We're Looking For
- 4+ years of experience in information security compliance, audit, or risk management within a technology environment.
- Strong understanding of cloud architecture, IAM, infrastructure, and SDLC controls, enabling effective collaboration and communication with technical teams.
- Experience working with one or more compliance frameworks, such as ISO 27001, SOC 2, PCI DSS, HIPAA, NIST 800-53, or NIS2.
- Strong audit communication skills: you know how to manage auditors, push back when evidence requests are out of scope, and defend a control position when you're right.
- Active user of AI tools to improve your own productivity.
Bonus Qualifications
- Experience with compliance automation, continuous monitoring initiatives, or GRC platform development.
- Experience with platforms such as Thoropass, AuditBoard, or Drata.
- Experience building AI-driven workflows or automations that reduce compliance toil.
- Experience integrating GRC tooling with engineering, cloud, identity, or monitoring platforms.
- Experience implementing continuous assurance capabilities.
What We Offer
At GoTo, we care about helping our people succeed at work and feel supported in life. Our employee benefits and programs are designed to support your well-being, growth, and sense of belonging. Here's what you can expect as part of our team:
- Comprehensive health benefits
- Generous paid time off, including paid holidays, volunteer days, quarterly self-care days, and company-designated no-meeting days
- Tuition reimbursement and access to instructor-led and on-demand learning and development programs
- The Thrive Global Wellness Program, a confidential Employee Assistance Program (EAP), a wellness app and one-on-one wellness coaching
- Employee-led communities and programs, including Employee Resource Groups (ERGs), GoTo Gives, and charitable matching
We work hard to create an environment where everyone feels welcome, respected, and able to contribute. Building a culture of belonging isn't just something we talk about - it's part of how we work every day.
Specific benefits and offerings may vary by country in line with local regulations and market practices.
At GoTo, you’ll find the flexibility, resources, and support you need to thrive—at work, at home, and everywhere in between. You’ll work towards a shared goal with an open-minded, cohesive team that’s greater than the sum of its parts. We’re committed to creating an inclusive space for everyone, because we know unique perspectives make us a stronger company and community. Join us and be part of a company that invests in your future, where together we’ll Be Real, Think Big, Move Fast, Keep Growing, and stay Customer Obsessed.Learn more.
Originally posted on Himalayas