Senior Governance Risk and Compliance Analyst

ABOUT THE ROLE RainFocus is a leading event technology platform that empowers Fortune 500 companies to deliver seamless in‑person, virtual, and hybrid experiences worldwide. As a Senior Governance, Risk, and Compliance Analyst, you will play a pivotal role in safeguarding the integrity of our platform and the data of our clients. You will own the end‑to‑end GRC program, driving continuous improvement across SOC 2, ISO 27001, PCI DSS, and emerging AI governance frameworks, while partnering with engineering, product, and legal teams to embed security into every stage of product development. WHAT YOU'LL DO You will lead the annual risk assessment cycle using NIST SP 800‑30 methodology, coordinating stakeholder interviews, risk scoring, and residual risk tracking. You will manage the control framework, mapping new regulations, conducting gap analyses, and maintaining up‑to‑date policies and documentation. You will partner with engineering to elevate vulnerability management and secrets scanning to proactive, pre‑deployment controls, and you will design and roll out a comprehensive Data Loss Prevention program across email, endpoints, and cloud storage. You will also spearhead AI governance initiatives, defining policy, tooling, and monitoring for approved versus unapproved AI usage, and you will collaborate with IT to close shadow‑IT gaps. WHAT YOU'LL NEED You bring at least six years of proven experience in GRC, IT audit, or information security compliance, with deep knowledge of SOC 2, ISO 27001, PCI DSS, NIST, GDPR, and related frameworks. You hold or are pursuing professional certifications such as CISA, CRISC, CISSP, or CIPP. You are proficient with modern GRC tools like Drata, OneTrust, or Vanta and have a track record of leading formal risk assessments beyond compliance checklists. Your analytical mindset, meticulous attention to detail, and strong communication skills enable you to translate complex security concepts to both technical and non‑technical stakeholders. You thrive in a fast‑paced, distributed environment and can juggle multiple projects while meeting deadlines. WHY REMOTE RainFocus embraces a fully distributed, asynchronous culture that empowers employees to work from anywhere while maintaining high collaboration standards. Our remote model offers flexible scheduling, allowing you to balance professional responsibilities with personal commitments. The company invests in robust virtual collaboration tools, regular virtual town halls, and virtual team‑building events to foster connection and inclusion across all locations. BENEFITS Competitive salary, 401(k) with company match, comprehensive health, dental, and vision coverage, paid time off, remote work stipend, annual learning budget, and access to global wellness programs.