Senior GRC Analyst - Information Security

South Burlington, Vermontfull timeOn Site

Apply on Employer Site

senior

$130k–$150k

H1B: no

BETA Technologies The Senior GRC Analyst at BETA Technologies leads incident response activities and mentors junior security analysts while enhancing the company's cyber defense operations. This role designs security controls, develops the cyber program, and integrates AI-driven defense technologies.

Responsibilities

Design, implement, and mature GRC frameworks aligned with industry standards
Coordinate internal and external audits, assessments, and certifications
Lead buildout of InfoSec GRC capabilities including risk assessments, policy development, compliance management, and security control implementation
Develop scalable GRC processes, templates, and tools
Conduct comprehensive risk assessments across IT systems, OT, and business processes
Develop risk treatment plans and monitor remediation activities
Translate regulatory requirements into actionable control requirements
Monitor regulatory landscape for emerging compliance obligations
Support control testing and validation activities
Conduct vendor security assessments and manage vendor compliance documentation
Work across departments to embed GRC practices
Drive continuous improvement of GRC processes

Qualification

Relevant security certifications (GIACExperience with SIEM platformsAbove and Beyond QualificationsAI/ML in CybersecurityEnterprise Security Tools

Required

7+ years of hands-on information security operational experience
5+ years of incident response and forensics experience (including triage, analysis, containment, and eradication)
Demonstrated expertise in security controls design, implementation, and assessment
Proven ability to mentor and develop junior security professionals
Significant experience leading or contributing to the growth and maturation of information security programs
Strong analytical and problem-solving skills with the ability to work under pressure
Excellent written and verbal communication skills
Relevant security certifications (GIAC, CISSP, CEH, or equivalent)
Experience with SIEM platforms, endpoint detection and response (EDR), and security orchestration tools
Above and Beyond Qualifications:
AI/ML in Cybersecurity: Hands-on experience implementing or leveraging machine learning and AI technologies to enhance detection, threat hunting, or automated response
Enterprise Security Tools: Familiarity with platforms like Splunk, Elastic, CrowdStrike, Sentinel, or similar