RainFocus brand banner

Senior Governance Risk and Compliance Analyst

RainFocusOrem, United StatesPosted 13d agoremote
via RemoteOK

RainFocus, one of the most innovative software companies, is in search of an exceptional Senior Governance, Risk, and Compliance (GRC) Analyst

 

About RainFocus

 

RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market — it will be challenging, fun, and exciting.

About the Role

We are seeking a highly skilled and motivated Senior GRC Analyst to join our Security and Privacy team. In this role, you will own and grow RainFocus's governance, risk, and compliance program — maintaining our control framework, leading risk assessments, supporting audits, and driving the program's maturity forward rather than simply maintaining the status quo. You will report directly to the CISO and have significant ownership from day one.

\n


Key Responsibilities:Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory compliance frameworks, including audit prep, evidence collection, and auditor relationships.   Manage and mature our control framework, mapping new regulations and conducting gap assessments.   Own the annual security risk assessment process (NIST SP 800-30 methodology), including stakeholder interviews, risk scoring, and residual risk tracking.   Maintain and update security policies, standards, and documentation to ensure compliance with industry best practices.   Partner with Engineering and Security to mature vulnerability management and secrets-scanning practices, moving these from reactive to proactive, pre-deployment controls.   Help build out and operationalize a Data Loss Prevention (DLP) program, including policy design and rollout across email, endpoint, and cloud storage.   Grow and mature RainFocus's security awareness training program.   Drive AI governance efforts — policy, tooling, and monitoring for approved vs. unapproved AI tool usage across the company.   Identify and help close Shadow IT / unmanaged SaaS visibility gaps in partnership with IT.   Collaborate with cross-functional teams to implement risk management practices and ensure compliance across the organization.   Respond to security and privacy inquiries from clients, partners, and employees.   Prepare and present reports on the organization's security and privacy compliance status, including program maturity and remediation progress. Stay abreast of emerging security threats, vulnerabilities, and compliance requirements.


Qualifications:

Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable.

6+ years of proven experience in GRC, IT audit, information security compliance, or a related field.

In-depth knowledge of relevant regulations, standards, and frameworks (e.g., SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and others).

Experience running or contributing heavily to formal risk assessments — not just tracking a compliance checklist.

Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable.

Familiarity with modern security tooling such as Drata, OneTrust, Vanta, etc.

Strong analytical and problem-solving skills, with keen attention to detail.

Excellent communication and interpersonal skills to work effectively with technical and non-technical stakeholders.

Ability to manage multiple projects and meet deadlines in a fast-paced environment.

Experience with cloud security and compliance frameworks is a plus.

Experience with OneTrust or related GRC technologies is a plus.


Personal Characteristics:

Strong work ethic and commitment to excellence.

Ability to work independently and as part of a team.

Excellent problem-solving and analytical skills.

Strong communication and interpersonal skills.

Ability to adapt to change and learn quickly.

Passion for security and privacy.


\n

Why work at RainFocus?

 

At RainFocus we delight millions of attendees at large-scale events by delivering better insights, experiences, and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events.

 

As a member of the RainFocus team, you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally, RainFocus offers competitive salaries, competitive benefits, 401k, generous PTO, and countless other team building activities. 

 

What are you waiting for? Apply today! We need more talented, hard-working, fun-loving team members just like yourself!



Please mention the word **INSIGHTFULLY** and tag RMTQyLjQ0LjIxNS45OQ== when applying to show you read the job post completely (#RMTQyLjQ0LjIxNS45OQ==). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.

Skills

  • analyst
  • design
  • saas
  • infosec
  • education
  • technical
  • dev
  • cloud
  • exec
  • senior
  • ops
  • marketing
  • engineer
  • digital nomad

Similar roles

  • Novartis logo

    Manager, Field Design Advisory

    Novartis·India, Gambia

    This job is with Novartis, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ business community. Please do not contact the recruiter directly. Summary Manager - Field Design Advisory About the Role Role/Job Title: Manager, Field Design Advisory Location: Hybrid About the Team: As an integral part of the Business Service International, the…

    • Full-time
  • ISG Personalmanagement GmbH logo

    Vertriebsmitarbeiter:in im Außendienst – Westösterreich & Süddeutschland

    ISG Personalmanagement GmbH·Innsbruck, Austria

    VERTRIEBSMITARBEITER:IN IM AUSSENDIENST - WESTÖSTERREICH & SÜDDEUTSCHLAND Unser Kunde zählt zu den führenden Anbietern hochwertiger Papierlösungen im deutschsprachigen Raum. Das tr aditionsreiche Unternehmen mit Schweizer Wurzeln und Sitz in Niederösterreich steht für Qualität, Verlässlichkeit und langfristige Kundenbeziehungen. Mit einem tiefen Produktsortiment, fundierter Branchenexpertise und einem klaren Fokus auf individuelle Kundenlösungen hat sich das Unternehmen als etablierter Partner für Unternehmen unterschiedlichster…

    • Full-time
  • Brocket Hall logo

    Deputy Course Manager

    Brocket Hall·Hatfield, United Kingdom

    Key Responsibilities: · Supervise and coordinate day-to-day course maintenance operations across both championship 18-hole courses, the 7-hole par-3 course, and all practice areas. · Act as the lead on pesticide, herbicide, and fertiliser application, including planning, calibration, and accurate record-keeping in line with legal and environmental compliance. · Support the delivery and oversight of capital improvement projects, including tee and…

    • Full-time
  • Resident Advisor logo

    Chief Platform Officer

    Resident Advisor·London, United Kingdom

    About RA Founded in 2001, Resident Advisor (RA) is one of the world's longest-running music media brands and a cornerstone of the dance, electronic and DJ ecosystem. The site's audience of over 7 million monthly users is drawn in by a combination of news, editorial, club listings and ticketing, RA-branded events at venues and festivals worldwide, original films and a…

    • Full-time
  • Pixelogic Media Partners, LLC logo

    Freelance Subtitling Linguist for Chinese-to-English

    Pixelogic Media Partners, LLC·Canada

    About the company Pixelogic Media Partners, LLC, a subsidiary of the IMAGICA GROUP, is a global provider of content localization and distribution services for the media and entertainment industry. Built on advanced next generation workflows and operations in Burbank, Culver City, London, Cairo and Cape Town, Pixelogic services the industry’s leading content owners including the major Hollywood studios, broadcasters and…

    • Remote
    • Full-time
    • Express EntryPR day one, no employer
  • Pixelogic Media Partners, LLC logo

    Freelance Subtitling Linguist for Chinese-to-English

    Pixelogic Media Partners, LLC·Australia

    About the company Pixelogic Media Partners, LLC, a subsidiary of the IMAGICA GROUP, is a global provider of content localization and distribution services for the media and entertainment industry. Built on advanced next generation workflows and operations in Burbank, Culver City, London, Cairo and Cape Town, Pixelogic services the industry’s leading content owners including the major Hollywood studios, broadcasters and…

    • Remote
    • Full-time
    • Skilled Independent 189PR, no sponsor
  • Pixelogic Media Partners, LLC logo

    Freelance Subtitling Linguist for Chinese-to-English

    Pixelogic Media Partners, LLC·United Kingdom

    About the company Pixelogic Media Partners, LLC, a subsidiary of the IMAGICA GROUP, is a global provider of content localization and distribution services for the media and entertainment industry. Built on advanced next generation workflows and operations in Burbank, Culver City, London, Cairo and Cape Town, Pixelogic services the industry’s leading content owners including the major Hollywood studios, broadcasters and…

    • Remote
    • Full-time
  • Park Paving Ltd. logo

    Estimating Coordinator

    Park Paving Ltd.·Edmonton, Canada

    Park Paving Ltd. is seeking an Estimating Coordinator to join our Estimating & Business Development Department in Edmonton. This is a new professional position created to strengthen departmental capacity, improve estimating processes, enhance information flow, and provide consistent coordination throughout the complete estimating lifecycle. The role is designed for someone who is organized, analytical, proactive, and comfortable managing information, systems,…

    • Full-time
    • Express EntryPR day one, no employer