> Markdown version of [/jobs/ext/1036804-information-security-grc-analyst](https://www.wearedevelopers.com/jobs/ext/1036804-information-security-grc-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security (GRC) Analyst - **Company:** Amiseq Inc. - **Location:** San Jose, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cyber Security, Python (Programming Language), Information Technology Security Auditing, Scripting, Information Security Management System, Large Language Models, Data Analytics, Low-code, Api Management - **Published:** June 30, 2026 - **Apply:** https://www.dice.com/job-detail/984f6dff-f0e9-4a85-8075-9e3db3f80a21 ## About the Role * Candidate must have 5 years working in governance, risk and compliance and/or information security and risk management. * Functional knowledge of some CISSP security domains and information security industry standard and best practices. * Functional knowledge of applicable security regulatory requirements (SOX, GDPR, AI Act). * Functional knowledge of ISMS governance models (i.e. ISO 27001, NIST, CAIQ), information security roles, security controls. * Functional knowledge of common security certifications (i.e. ISO 27001, ISO 42001, SOC1, SOC2) and ability to glean significance from findings identified in these reports. * Ability to communicate risk methodologies and concepts to business units and IT teams. * Demonstrated experience with controls definition, development, implementation and assessment. * Hands-on experience building or customizing AI/automation solutions, including LLM-based workflows, agents, or copilots, API integrations, scripting (e.g., Python), or low-code platforms. * Ability to translate GRC use cases into scalable automation solutions. * Understanding of AI risks, controls, and governance frameworks (ISO 42001, AI Act). * Strong interpersonal skills and ability to work effectively with diverse and distributed teams. * Strong attention to detail, project management and organizational skills. * Self-starter with the ability to effectively manage independent workloads asynchronously with stakeholders across multiple time zones. ## Description Information Security Governance, Risk, and Compliance (GRC) Analyst Reporting to the Director Information Security, Governance, Risk, and Compliance, the GRC analyst will contribute to the development and operational execution of the program, including risk management and compliance with standards and regulations such as ISO27001, ISO 42001, EU GDPR, and EU AI Act, and transforming the program through intelligent automation, AI agents, and data-driven solutions. Responsibilities: * Support the GRC operating model and the service-oriented customer engagement model. * Support GRC capabilities, such as enterprise security risk management, compliance and audit management, policy management, security awareness training, third party risk management, and metrics and reporting. * Assist to manage security compliance programs and activities that support various compliance regulations. * Perform risk assessments that address security threats, changes to systems and/or applications, process improvement initiatives, supplier assessments (including downstream outsourcers) and other requests from the business. * Collaborate with various operational and business teams to complete assessments and drive remediation items to closure. Maintain accurate reporting of remediation activities to bring appropriate visibility to stakeholders and leadership. * Monitor the security risk profiles and events of our suppliers to objectively determine high risk suppliers that require additional review and treatment plans. * Design, build, and deploy AI-powered solutions (including agents) to scale GRC processes including but not limited to Security questionnaires, Risk assessments, Evidence collection and control testing * Develop automated workflows and pipelines using APIs, scripting, or low-code platforms * Apply LLMs/NLP to analyze policies, audit findings, and regulatory requirements * Extract insights from large GRC datasets to build and maintain AI-driven risk scoring and prioritization models. * Partner with security, engineering, and data teams to productionize AI use cases. * Ensure secure, compliant, and governed use of AI aligned with ISO 42001 and EU AI Act. * Establish and maintain security metrics and reporting including automating KRI/KPI generation and reporting pipelines, deliver real-time visibility into security risk posture that aligns with operational/business risk areas and corporate risk. * Measure and report efficiency gains from automation (time saved, coverage increased, etc.) * Respond to customer security/compliance questionnaires. * Act as security risk management "ambassador" to internal customers. Accountable for: * The use of defined risk methodologies and best practices to perform IT/Security assessments. Responsible for the planning, scoping, tracking, and execution of these assessments. * Driving remediation activities from identification, remediation plan and closure. Hold owners accountable to delivery of remediation solution within the agreed upon/reasonable SLA. * Operations and improvements of security audit and compliance programs to support various compliance regulations. * Own the AI/automation roadmap for GRC processes * Delivery of measurable efficiency improvements (e.g., % reduction in manual effort) * Deployment of production-grade AI/automation solutions * Automation of metrics and reporting to continually report on meaningful security, risk and compliance metrics for operational and executive management. ## Related Videos - [How to govern Vibe Coding for the Enterprise](https://www.wearedevelopers.com/videos/100290-how-to-govern-vibe-coding-for-the-enterprise) - [Reimagining app development with Low-code and AI](https://www.wearedevelopers.com/videos/1651-reimagining-app-development-with-low-code-and-ai) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What If Apps Built Themselves? AI-Powered Low-Code for the Industrial Enterprise](https://www.wearedevelopers.com/videos/2079-what-if-apps-built-themselves-ai-powered-low-code-for-the-industrial-enterprise) ## Related Articles - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)