GRC Security Analyst

An experienced GRC analyst at Clear Capital, the property valuation and appraisal technology company, responsible for keeping it in line with security standards, regulations and policies in the heavily regulated mortgage lending sector.

The analyst monitors compliance with frameworks such as NIST CSF, ISO 27001, SOC 2 and ISO 42001 and with rules such as GLBA, CCPA and GDPR, runs risk assessments, maintains security policies, leads audit preparation, assesses vendors, tracks remediation and reports metrics to leadership. Clear Capital wants five years in GRC, security compliance or risk (or three with a master's), a certification such as CISSP, CISM, CISA, CRISC or AIGP, familiarity with GRC tools such as Vanta or Drata, and working knowledge of cloud, DevOps and application security.