Sr. GRC Analyst

📋 Description Own assigned GRC projects, compliance deliverables, and process improvements from planning through Support the day-to-day operation and continuous improvement of Aya’s enterprise GRC program. Design and improve scalable workflows that translate regulatory and framework requirements into Support compliance efforts for SOC 2 and ISO/IEC 27001:2022, including readiness activities, audit Establish and maintain clear control ownership, traceability, documentation, and evidence Identify opportunities to replace manual or spreadsheet-driven compliance activities with 🎯 Requirements 4+ years of experience in Governance, Risk, and Compliance, Information Security, IT Audit, or a Hands-on experience operating or configuring GRC tools such as ServiceNow GRC / IRM, Drata, Vanta Demonstrated experience owning GRC projects, compliance deliverables, or process-improvement Strong working knowledge of SOC 2 or ISO/IEC 27001:2022. Familiarity with HIPAA and other Experience with control design, evidence evaluation, risk assessments, audit support, remediation Experience improving manual compliance processes through automation, workflow design, or 🎁 Benefits Free premium medical, dental, life and vision insurance Generous 401(k) match Aya also offers other benefits to those that are eligible and where required by applicable law Aya provides paid sick leave in accordance with all applicable state, federal, and local laws. Celebrations! We hit our goals and reward ourselves. Company-sponsored virtual events, happy hours and team-building activities are always on the