Senior Security GRC Analyst

📋 Description Be a key contributor to Nimbus Data Systems's GRC within Information Security. Partner with GRC, Infosec, and Eng to design a risk-first governance function. Identify opportunities to improve efficiency, designing tools and automations. Write, revise, and manage security policies, standards, and procedures. Identify and assess information security risks; implement controls; monitor and report. Be a subject matter expert in GRC; educate others at Nimbus Data Systems. 🎯 Requirements 4+ years in Security GRC. Experience interfacing with software engineers to map risks to controls and policies. Experience assessing policy adherence and developing remediation plans. Deep understanding of risk assessment, compliance frameworks, policy creation, and education. Understanding of security concepts and a broad range of risks and controls. Background in tech; coding not required, but ability to interface with engineers. 🎁 Benefits Onsite in San Mateo: Tue–Thu, optional Mon/Fri. Equity compensation for full-time employees. Equal opportunity employer with accommodations during recruiting. Collaborative, high-performing team culture that shapes GRC.