[Remote] Senior GRC Analyst at Serve Robotics

Candidates should possess knowledge in ISO 27001/2 and SOC 2 trust principles, along with information security best practices. Desired certifications include ISO/IEC 27001 Lead Implementer/Auditor, CISA, or CISSP. Experience is required in participating in compliance audits, preparing audit workpapers, managing an Enterprise Risk Management (ERM) Lifecycle, and familiarity with Standard Information Gathering (SIG) for vendor risk assessments. Experience using Atlassian Jira for project management and configuring/managing GRC or IRM tools like Archer, ZenGRC, RSAM, or Vanta is also required. Experience developing compliance and security analytics using BI tools such as Looker, PowerBI, or Chartio is needed. The ability to prioritize and manage competing priorities in a fast-paced environment is essential.