Senior Level Grc Analyst Jobs
Senior level grc analyst jobs place experienced professionals in charge of governance frameworks, risk program ownership, and the compliance initiatives that protect enterprise operations. Roles are concentrated across Technology & Software, Science & Research, and Construction & Real Estate, with a mix of on-site, hybrid, and remote positions, and employers like Anthropic, Clayco, and Edward Jones hiring at this level now.
Find Senior Level Grc Analyst JobsOverview
Showing 5 of 32+ Senior Level Grc Analyst jobs
At Veracyte, we offer exciting career opportunities for those interested in joining a pioneering team that is committed to transforming cancer care for patients across the globe. Working at Veracyte enables our employees to not only make a meaningful impact on the lives of patients, but to also learn and grow within a purpose driven environment. This is what we call the Veracyte way – it's about how we work together, guided by our values, to give clinicians the insights they need to help patients make life-changing decisions.
Our Values:
- We Seek A Better Way: We pursue bold ideas, embrace complexity, and keep pushing forward.
- We Make It Happen: We act with urgency, deliver with excellence, and always find a way.
- We Are Stronger Together: We engage with empathy, align around what's best for Veracyte, and celebrate as one team.
- We Care Deeply: We show up with integrity, kindness, and respect for one another.
The Position:
The Manager, IT & Cybersecurity GRC (Governance, Risk, and Compliance) leads the design, execution, and continuous improvement of enterprise technology controls and risk management programs. This role is accountable for managing IT SOX compliance, advancing enterprise risk management (ERM) initiatives, and strengthening cybersecurity governance across a highly regulated environment. You will partner cross‑functionally to translate risk into actionable insights, elevate control maturity, and support business growth while ensuring regulatory alignment.
This is a highly visible role that combines strong technical expertise with people leadership, program ownership, and strategic influence across Finance, Internal Audit, Engineering, and Executive leadership.
Core Responsibilities
- Lead and execute the IT SOX program, including annual scoping, risk assessments, control design, testing strategy, and deficiency remediation
- Own and continuously improve the IT General Controls (ITGC) framework (Access, Change Management, Operations, SDLC) ensuring alignment with SOX and COSO standards
- Serve as the primary liaison to Internal and External Audit, driving efficient audit execution and high-quality outcomes
- Partner closely with Finance and Internal Audit to co-develop control narratives, risk assessments, and audit committee materials
- Drive the evolution of the Enterprise Risk Management (ERM) program for IT and Cybersecurity risks, including facilitating cross-functional risk workshops and maintaining the enterprise risk register
- Translate technical risks into business-relevant insights and provide clear reporting to executive stakeholders, including the CIO and Audit Committee
- Lead risk lifecycle activities including risk identification, assessment, mitigation planning, and ongoing monitoring
- Establish and track key risk indicators (KRIs) and key performance indicators (KPIs) to measure program effectiveness and inform decision-making
- Author and maintain IT and cybersecurity policies, standards, and procedures to ensure compliance with regulatory and industry frameworks
- Evaluate and integrate GRC tools, automation, and analytics to enhance control monitoring and reporting capabilities
- Review and assess third-party risk through SOC1/SOC2 and other service provider assurance reports
- Lead and develop a small team (or provide functional leadership), fostering growth, accountability, and high performance
- Drive cross-functional initiatives and special projects that strengthen governance, risk posture, and operational resilience
Who You Are:
You are a collaborative and solutions-oriented leader who brings structure to complexity and thrives in a fast-moving, regulated environment. You balance technical depth with business acumen and are energized by building programs, partnering across teams, and developing others. You communicate with clarity, act with integrity, and embrace continuous improvement in everything you do.
Required Qualifications
- 6+ years of progressive experience in integrated audit, regulatory compliance, cybersecurity GRC, or risk management
- Demonstrated experience owning and executing IT SOX / ITGC programs within a public company or SOX-regulated environment
- Hands-on experience with risk management frameworks (COSO, NIST RMF, ISO 27001/27005 or similar)
- Proven ability to lead cross-functional initiatives and drive alignment across Finance, Audit, Engineering, and Security teams
- Experience managing audits and serving as a primary point of contact for auditors
- Strong analytical and problem-solving skills with the ability to assess complex risks and design effective controls
- Experience mentoring or leading others, with a track record of developing talent and fostering strong team engagement
- Bachelor's Degree in Accounting, Information Systems, Cybersecurity, or a related field
Preferred Qualifications
- Professional certifications such as CPA, CISA, CISSP, or CRISC
- Background in public accounting (Big 4 or large regional firm) with IT audit experience
- Experience in regulated industries such as healthcare, diagnostics, or financial services
- Experience implementing GRC tools and driving automation or continuous control monitoring (CCM)
- Ability to leverage emerging technologies, including AI-enabled tools, to enhance compliance and risk management processes
- Strong executive communication skills with experience presenting to senior leadership or audit committees
#LI-Remote
What We Can Offer You
Veracyte is a growing company that offers significant career opportunities if you are curious, driven, patient-oriented and aspire to help us build a great company. We offer competitive compensation and benefits, and are committed to fostering an inclusive workforce, where diverse backgrounds are represented, engaged, and empowered to drive innovative ideas and decisions. We are thrilled to be recognized as a 2024 Certified™ Great Place to Work® in both the US and Israel - a testament to our dynamic, inclusive, and inspiring workplace where passion meets purpose.
About Veracyte
Veracyte (Nasdaq: VCYT) is a global diagnostics company whose vision is to transform cancer care for patients all over the world. We empower clinicians with the high-value insights they need to guide and assure patients at pivotal moments in the race to diagnose and treat cancer. Our Veracyte Diagnostics Platform delivers high-performing cancer tests that are fueled by broad genomic and clinical data, deep bioinformatic and AI capabilities, and a powerful evidence-generation engine, which ultimately drives durable reimbursement and guideline inclusion for our tests, along with new insights to support continued innovation and pipeline development. For more information, please visit www.veracyte.com or follow us on LinkedIn or X (Twitter).
Veracyte, Inc. is an Equal Opportunity Employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability status. Veracyte participates in E-Verify in the United States. View our CCPA Disclosure Notice
If you receive any suspicious alerts or communications through LinkedIn or other online job sites for any position at Veracyte, please exercise caution and promptly report any concerns to careers@veracyte.com
At Veracyte, we offer exciting career opportunities for those interested in joining a pioneering team that is committed to transforming cancer care for patients across the globe. Working at Veracyte enables our employees to not only make a meaningful impact on the lives of patients, but to also learn and grow within a purpose driven environment. This is what we call the Veracyte way – it's about how we work together, guided by our values, to give clinicians the insights they need to help patients make life-changing decisions.
Our Values:
- We Seek A Better Way: We pursue bold ideas, embrace complexity, and keep pushing forward.
- We Make It Happen: We act with urgency, deliver with excellence, and always find a way.
- We Are Stronger Together: We engage with empathy, align around what's best for Veracyte, and celebrate as one team.
- We Care Deeply: We show up with integrity, kindness, and respect for one another.
The Position:
The Manager, IT & Cybersecurity GRC (Governance, Risk, and Compliance) leads the design, execution, and continuous improvement of enterprise technology controls and risk management programs. This role is accountable for managing IT SOX compliance, advancing enterprise risk management (ERM) initiatives, and strengthening cybersecurity governance across a highly regulated environment. You will partner cross‑functionally to translate risk into actionable insights, elevate control maturity, and support business growth while ensuring regulatory alignment.
This is a highly visible role that combines strong technical expertise with people leadership, program ownership, and strategic influence across Finance, Internal Audit, Engineering, and Executive leadership.
Core Responsibilities
- Lead and execute the IT SOX program, including annual scoping, risk assessments, control design, testing strategy, and deficiency remediation
- Own and continuously improve the IT General Controls (ITGC) framework (Access, Change Management, Operations, SDLC) ensuring alignment with SOX and COSO standards
- Serve as the primary liaison to Internal and External Audit, driving efficient audit execution and high-quality outcomes
- Partner closely with Finance and Internal Audit to co-develop control narratives, risk assessments, and audit committee materials
- Drive the evolution of the Enterprise Risk Management (ERM) program for IT and Cybersecurity risks, including facilitating cross-functional risk workshops and maintaining the enterprise risk register
- Translate technical risks into business-relevant insights and provide clear reporting to executive stakeholders, including the CIO and Audit Committee
- Lead risk lifecycle activities including risk identification, assessment, mitigation planning, and ongoing monitoring
- Establish and track key risk indicators (KRIs) and key performance indicators (KPIs) to measure program effectiveness and inform decision-making
- Author and maintain IT and cybersecurity policies, standards, and procedures to ensure compliance with regulatory and industry frameworks
- Evaluate and integrate GRC tools, automation, and analytics to enhance control monitoring and reporting capabilities
- Review and assess third-party risk through SOC1/SOC2 and other service provider assurance reports
- Lead and develop a small team (or provide functional leadership), fostering growth, accountability, and high performance
- Drive cross-functional initiatives and special projects that strengthen governance, risk posture, and operational resilience
Who You Are:
You are a collaborative and solutions-oriented leader who brings structure to complexity and thrives in a fast-moving, regulated environment. You balance technical depth with business acumen and are energized by building programs, partnering across teams, and developing others. You communicate with clarity, act with integrity, and embrace continuous improvement in everything you do.
Required Qualifications
- 6+ years of progressive experience in integrated audit, regulatory compliance, cybersecurity GRC, or risk management
- Demonstrated experience owning and executing IT SOX / ITGC programs within a public company or SOX-regulated environment
- Hands-on experience with risk management frameworks (COSO, NIST RMF, ISO 27001/27005 or similar)
- Proven ability to lead cross-functional initiatives and drive alignment across Finance, Audit, Engineering, and Security teams
- Experience managing audits and serving as a primary point of contact for auditors
- Strong analytical and problem-solving skills with the ability to assess complex risks and design effective controls
- Experience mentoring or leading others, with a track record of developing talent and fostering strong team engagement
- Bachelor's Degree in Accounting, Information Systems, Cybersecurity, or a related field
Preferred Qualifications
- Professional certifications such as CPA, CISA, CISSP, or CRISC
- Background in public accounting (Big 4 or large regional firm) with IT audit experience
- Experience in regulated industries such as healthcare, diagnostics, or financial services
- Experience implementing GRC tools and driving automation or continuous control monitoring (CCM)
- Ability to leverage emerging technologies, including AI-enabled tools, to enhance compliance and risk management processes
- Strong executive communication skills with experience presenting to senior leadership or audit committees
#LI-Remote
What We Can Offer You
Veracyte is a growing company that offers significant career opportunities if you are curious, driven, patient-oriented and aspire to help us build a great company. We offer competitive compensation and benefits, and are committed to fostering an inclusive workforce, where diverse backgrounds are represented, engaged, and empowered to drive innovative ideas and decisions. We are thrilled to be recognized as a 2024 Certified™ Great Place to Work® in both the US and Israel - a testament to our dynamic, inclusive, and inspiring workplace where passion meets purpose.
About Veracyte
Veracyte (Nasdaq: VCYT) is a global diagnostics company whose vision is to transform cancer care for patients all over the world. We empower clinicians with the high-value insights they need to guide and assure patients at pivotal moments in the race to diagnose and treat cancer. Our Veracyte Diagnostics Platform delivers high-performing cancer tests that are fueled by broad genomic and clinical data, deep bioinformatic and AI capabilities, and a powerful evidence-generation engine, which ultimately drives durable reimbursement and guideline inclusion for our tests, along with new insights to support continued innovation and pipeline development. For more information, please visit www.veracyte.com or follow us on LinkedIn or X (Twitter).
Veracyte, Inc. is an Equal Opportunity Employer and will consider all qualified applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status or disability status. Veracyte participates in E-Verify in the United States. View our CCPA Disclosure Notice
If you receive any suspicious alerts or communications through LinkedIn or other online job sites for any position at Veracyte, please exercise caution and promptly report any concerns to careers@veracyte.com
See All 32 Senior Level Grc Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Senior Level Grc Analyst JobsSenior Level Grc Analyst Job Market
Who's Hiring
- Anthropic5
- Clayco3
- Edward Jones2
- Adobe1
- Vanta1
Top Industries Hiring
- Technology & Software7
- Science & Research5
- Construction & Real Estate3
- Retail2
- Investment & Asset Management2
Senior Level Grc Analyst Jobs: Frequently Asked Questions
How do I get a senior level grc analyst job?
Employers hiring at this level look for candidates who have owned risk assessment programs end to end, not just contributed to them. A strong portfolio of completed audits, policy frameworks you authored, and measurable compliance outcomes sets you apart. Demonstrated experience leading cross-functional initiatives and mentoring junior analysts signals the readiness employers expect at the senior level.
Which companies hire senior level grc analysts?
Companies hiring senior level grc analysts right now include Anthropic, Clayco, and Edward Jones, based on current listings on Migrate Mate as of July 2026. Hiring at this level tends to concentrate in larger enterprises, regulated financial institutions, healthcare organizations, and technology firms with mature security and compliance functions.
Are there remote senior level grc analyst jobs?
Yes, remote and hybrid availability is strong at the senior level. About 32% of senior level grc analyst openings are remote or hybrid as of July 2026, reflecting how many organizations treat governance, risk, and compliance work as location-flexible for experienced professionals who can operate independently and lead distributed teams.
What makes a grc analyst role senior level?
Senior level grc analyst roles are defined by scope, ownership, and leadership. You are expected to design and own risk management frameworks, lead regulatory compliance programs, and represent GRC priorities to executive stakeholders. Mentoring junior analysts, driving policy development, and making judgment calls without close supervision are standard expectations, not optional additions.
Which industries hire the most senior level grc analysts?
Senior Level grc analyst roles concentrate in Technology & Software, Science & Research, and Construction & Real Estate, based on current listings on Migrate Mate as of July 2026. These sectors drive demand because they operate under complex regulatory environments, face significant audit exposure, and require experienced professionals who can translate compliance requirements into operational risk strategy.