> Markdown version of [/jobs/ext/1576311-information-security-grc-analyst-4](https://www.wearedevelopers.com/jobs/ext/1576311-information-security-grc-analyst-4). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security GRC Analyst 4 - **Company:** Adobe Systems - **Location:** San Jose, CA, United States - **Experience:** Expert - **Salary:** $157,900.0 - $228,575.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Data Driven Tests, Strategies of Testing, Software Organization, Google Cloud, Adobe - **Published:** July 15, 2026 - **Apply:** https://adobe.wd5.myworkdayjobs.com/external_experienced/job/San-Jose/Information-Security-GRC-Analyst-4_R170515 ## About the Role * 5-8+ years of experience in Governance, Risk & Compliance (GRC), Information Security, Audit, Risk Management, or a related field. * Solid understanding of industry frameworks and standards such as SOC 1/2/3, ISO 27001, ISO 9001, ISO 42001, HIPAA, CSA STAR, FedRAMP, NIST, or similar regulatory and compliance requirements. * Experience driving multi-functional programs involving Security, Engineering, Product, Legal, Privacy, HR, and external auditors. * Strong executive communication and presentation skills, with the ability to translate technical and compliance concepts into clear business-focused recommendations. * Strong analytical, problem-solving, and organizational skills with exceptional attention to detail. * Ability to work effectively in ambiguous environments, exercise good judgment, and proactively identify and mitigate risks before they become critical issues. Preferred Qualifications * Experience leading large-scale assurance programs such as internal preparedness evaluations, enterprise audit portfolios, certification readiness initiatives, or regulated product onboarding efforts. * Familiarity with Adobe's Common Controls Framework (CCF) or similar enterprise control frameworks. * Experience managing external assessor relationships and leading customer-facing or regulator-facing audits. * Knowledge of cloud technologies (AWS, Azure, GCP), security technologies, and modern software development practices. * Demonstrated success mentoring junior team members and raising quality standards across a team or program. * Professional certifications such as CISA, CRISC, CISSP, CISM, ISO 27001 Lead Auditor, ISO 42001 Lead Implementer/Auditor, PCI ISA, or equivalent. ## Description * Independently lead complex compliance and assurance programs from initiation through completion. * Drive planning, execution, issue management, reporting, and partner communications. * Own program outcomes with minimal strategic direction. * Lead multi-functional working groups and coordinate activities across multiple organizations. * Proactively identify risks, dependencies, and execution challenges and drive resolution plans. Audit & Compliance Leadership * Serve as the primary Tech GRC lead for internal readiness assessments, regulatory audits, certifications, and external assurance engagements. * Coordinate audit planning, evidence collection, walkthroughs, testing activities, auditor interactions, and remediation management. * Develop and maintain expertise in applicable compliance frameworks and Adobe's Common Controls Framework (CCF). * Provide mentorship on control design, test strategies, and compliance requirements. Partner Management * Independently manage relationships with partners up to the senior manager and director level. * Present recommendations, findings, risk assessments, and program status to management audiences. * Influence decision-making through strong business insight, technical credibility, and data-driven analysis. * Build trusted partnerships across Security, Engineering, Legal, Privacy, Product, HR, and external auditors. Domain Expertise * Develop deep expertise in multiple compliance frameworks and associated technologies. * Serve as a trusted advisor to product teams, security teams, and Tech GRC leadership. * Support developing staff and help raise the overall quality of delivery across the organization. * Contribute to internal documentation, standards, training materials, and knowledge-sharing initiatives Process Improvement & Scale * Drive operational improvements that improve efficiency, consistency, and audit readiness. * Build repeatable processes, templates, dashboards, and governance mechanisms. * Find opportunities for automation and collaborate with GRC Engineering to improve control monitoring and evidence collection. * Contribute to critical initiatives that improve Tech GRC capabilities and maturity. ## Related Videos - [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills) - [3x Performance: A Humbling Journey](https://www.wearedevelopers.com/videos/100165-3x-performance-a-humbling-journey) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers) - [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)