Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory ... Manage and mature our control framework, mapping new regulations and conducting gap assessments.
Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory ... Manage and mature our control framework, mapping new regulations and conducting gap assessments.
The position serves as the primary owner of the GRC platform for the business and ensures ... Operational Issue Management * Partner with business stakeholders to review, assess, and remediate ...
The position serves as the primary owner of the GRC platform for the business and ensures ... Operational Issue Management * Partner with business stakeholders to review, assess, and remediate ...
This is a remote position available in the state listed on this job. Additionally, employment with ... Partner with Security Engineering, Application Security, Security Operations, and GRC to ensure ...
Quick apply
This is a remote position available in the state listed on this job. Additionally, employment with ... Partner with Security Engineering, Application Security, Security Operations, and GRC to ensure ...
Head of Pre-Sales & Solutions
Provo, UT · On-site +1
$250K - $285K/yr
This is a remote role unless you fall within the following parameters. If you live within ... Required Experience * 5+ years managing a Solutions Engineering, Sales Engineering, or Pre-Sales ...
Head of Pre-Sales & Solutions
Provo, UT · On-site +1
$250K - $285K/yr
This is a remote role unless you fall within the following parameters. If you live within ... Required Experience * 5+ years managing a Solutions Engineering, Sales Engineering, or Pre-Sales ...
Grc Manager Remote information
What does a GRC manager do in a remote role?
A GRC (Governance, Risk, and Compliance) Manager oversees and implements policies and processes that help an organization manage risks, ensure compliance with laws and regulations, and establish effective governance structures. In a remote role, a GRC Manager utilizes digital tools to collaborate with teams, conduct risk assessments, monitor compliance activities, and provide guidance on regulatory requirements. They play a critical role in safeguarding company assets and data while ensuring that the organization adheres to industry standards even when working remotely.
How does a remote GRC manager typically collaborate with cross-functional teams to ensure compliance and manage risk?
As a remote GRC (Governance, Risk, and Compliance) Manager, effective collaboration with cross-functional teams is achieved through regular virtual meetings, clear communication channels, and shared documentation platforms. You’ll often coordinate with IT, legal, audit, and business units to assess risks, implement controls, and monitor compliance initiatives. Utilizing project management tools and video conferencing software is essential for maintaining alignment and driving progress on GRC initiatives. Building strong relationships remotely requires proactive communication and a structured approach to updates and feedback.
What are the key skills and qualifications needed to thrive as a GRC manager in a remote role, and why are they important?
To thrive as a GRC (Governance, Risk, and Compliance) Manager remotely, you need strong expertise in risk management, regulatory compliance, and policy development, often supported by a degree in business, IT, or a related field. Familiarity with GRC platforms like RSA Archer, LogicManager, or ServiceNow, as well as certifications such as CISM or CRISC, is highly valuable. Outstanding soft skills include analytical thinking, effective virtual communication, and the ability to lead and collaborate with distributed teams. These skills and qualifications are crucial for ensuring organizational compliance, minimizing risk, and maintaining seamless operations across remote environments.
What is the difference between Grc Manager Remote vs Compliance Analyst?
| Aspect | Grc Manager Remote | Compliance Analyst |
|---|---|---|
| Credentials | Certifications like CISA, CISM, or CRISC often preferred | Certifications such as CISA or CIA common |
| Work Environment | Remote, managerial oversight, strategic planning | Remote or on-site, focused on compliance monitoring and reporting |
| Industry Usage | Used across finance, healthcare, and tech sectors | Common in finance, healthcare, and manufacturing |
| Search Intent | Looking for managerial roles in GRC, remote jobs | Seeking compliance analysis roles, remote or on-site |
The Grc Manager Remote and Compliance Analyst roles share overlapping credentials and industry usage, but differ mainly in scope and responsibilities. The Grc Manager oversees risk, compliance, and governance strategies at a managerial level, often remotely, while the Compliance Analyst focuses on monitoring and ensuring adherence to regulations, typically with a more operational role.
What are popular job titles related to Grc Manager Remote jobs in Utah?
For Grc Manager Remote jobs in Utah, the most frequently searched job titles are:
- Remote Epic Security Analyst
- Google Analytics Remote
- Remote Information Security Compliance Analyst
- Retail Data Analyst Remote
- Remote Public Health Analyst
- Remote Reporting Analyst Assistant
- Remote Energy Analyst Freelancer
- Remote Kyc Onboarding Analyst
- Remote Medical Records Analyst
- Nuclear Policy Analyst Remote
What job categories do people searching Grc Manager Remote jobs in Utah look for?
The top searched job categories for Grc Manager Remote jobs in Utah are:
What cities in Utah are hiring for Grc Manager Remote jobs?
Cities in Utah with the most Grc Manager Remote job openings:
Full-time
Retirement, PTO
Posted 10 days ago
Job description
RainFocus, one of the most innovative software companies, is in search of an exceptional Senior Governance, Risk, and Compliance (GRC) Analyst.
About RainFocus
RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market - it will be challenging, fun, and exciting.
About the Role
We are seeking a highly skilled and motivated Senior GRC Analyst to join our Security and Privacy team. In this role, you will own and grow RainFocus's governance, risk, and compliance program - maintaining our control framework, leading risk assessments, supporting audits, and driving the program's maturity forward rather than simply maintaining the status quo. You will report directly to the CISO and have significant ownership from day one.
Key Responsibilities:
Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory compliance frameworks, including audit prep, evidence collection, and auditor relationships.
Manage and mature our control framework, mapping new regulations and conducting gap assessments.
Own the annual security risk assessment process (NIST SP 800-30 methodology), including stakeholder interviews, risk scoring, and residual risk tracking.
Maintain and update security policies, standards, and documentation to ensure compliance with industry best practices.
Partner with Engineering and Security to mature vulnerability management and secrets-scanning practices, moving these from reactive to proactive, pre-deployment controls.
Help build out and operationalize a Data Loss Prevention (DLP) program, including policy design and rollout across email, endpoint, and cloud storage.
Grow and mature RainFocus's security awareness training program.
Drive AI governance efforts - policy, tooling, and monitoring for approved vs. unapproved AI tool usage across the company.
Identify and help close Shadow IT / unmanaged SaaS visibility gaps in partnership with IT.
Collaborate with cross-functional teams to implement risk management practices and ensure compliance across the organization.
Respond to security and privacy inquiries from clients, partners, and employees.
Prepare and present reports on the organization's security and privacy compliance status, including program maturity and remediation progress.
Stay abreast of emerging security threats, vulnerabilities, and compliance requirements.
Qualifications:
Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable.
6+ years of proven experience in GRC, IT audit, information security compliance, or a related field.
In-depth knowledge of relevant regulations, standards, and frameworks (e.g., SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and others).
Experience running or contributing heavily to formal risk assessments - not just tracking a compliance checklist.
Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable.
Familiarity with modern security tooling such as Drata, OneTrust, Vanta, etc.
Strong analytical and problem-solving skills, with keen attention to detail.
Excellent communication and interpersonal skills to work effectively with technical and non-technical stakeholders.
Ability to manage multiple projects and meet deadlines in a fast-paced environment.
Experience with cloud security and compliance frameworks is a plus.
Experience with OneTrust or related GRC technologies is a plus.
Personal Characteristics:
Strong work ethic and commitment to excellence.
Ability to work independently and as part of a team.
Excellent problem-solving and analytical skills.
Strong communication and interpersonal skills.
Ability to adapt to change and learn quickly.
Passion for security and privacy.
Why work at RainFocus?
At RainFocus we delight millions of attendees at large-scale events by delivering better insights, experiences, and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events.
As a member of the RainFocus team, you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally, RainFocus offers competitive salaries, competitive benefits, 401k, generous PTO, and countless other team building activities.
What are you waiting for? Apply today! We need more talented, hard-working, fun-loving team members just like yourself!
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
About RainFocus
RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market - it will be challenging, fun, and exciting.
About the Role
We are seeking a highly skilled and motivated Senior GRC Analyst to join our Security and Privacy team. In this role, you will own and grow RainFocus's governance, risk, and compliance program - maintaining our control framework, leading risk assessments, supporting audits, and driving the program's maturity forward rather than simply maintaining the status quo. You will report directly to the CISO and have significant ownership from day one.
Key Responsibilities:
Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory compliance frameworks, including audit prep, evidence collection, and auditor relationships.
Manage and mature our control framework, mapping new regulations and conducting gap assessments.
Own the annual security risk assessment process (NIST SP 800-30 methodology), including stakeholder interviews, risk scoring, and residual risk tracking.
Maintain and update security policies, standards, and documentation to ensure compliance with industry best practices.
Partner with Engineering and Security to mature vulnerability management and secrets-scanning practices, moving these from reactive to proactive, pre-deployment controls.
Help build out and operationalize a Data Loss Prevention (DLP) program, including policy design and rollout across email, endpoint, and cloud storage.
Grow and mature RainFocus's security awareness training program.
Drive AI governance efforts - policy, tooling, and monitoring for approved vs. unapproved AI tool usage across the company.
Identify and help close Shadow IT / unmanaged SaaS visibility gaps in partnership with IT.
Collaborate with cross-functional teams to implement risk management practices and ensure compliance across the organization.
Respond to security and privacy inquiries from clients, partners, and employees.
Prepare and present reports on the organization's security and privacy compliance status, including program maturity and remediation progress.
Stay abreast of emerging security threats, vulnerabilities, and compliance requirements.
Qualifications:
Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable.
6+ years of proven experience in GRC, IT audit, information security compliance, or a related field.
In-depth knowledge of relevant regulations, standards, and frameworks (e.g., SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and others).
Experience running or contributing heavily to formal risk assessments - not just tracking a compliance checklist.
Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable.
Familiarity with modern security tooling such as Drata, OneTrust, Vanta, etc.
Strong analytical and problem-solving skills, with keen attention to detail.
Excellent communication and interpersonal skills to work effectively with technical and non-technical stakeholders.
Ability to manage multiple projects and meet deadlines in a fast-paced environment.
Experience with cloud security and compliance frameworks is a plus.
Experience with OneTrust or related GRC technologies is a plus.
Personal Characteristics:
Strong work ethic and commitment to excellence.
Ability to work independently and as part of a team.
Excellent problem-solving and analytical skills.
Strong communication and interpersonal skills.
Ability to adapt to change and learn quickly.
Passion for security and privacy.
Why work at RainFocus?
At RainFocus we delight millions of attendees at large-scale events by delivering better insights, experiences, and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events.
As a member of the RainFocus team, you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally, RainFocus offers competitive salaries, competitive benefits, 401k, generous PTO, and countless other team building activities.
What are you waiting for? Apply today! We need more talented, hard-working, fun-loving team members just like yourself!
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
About RainFocus
Sourced by ZipRecruiter
Industry
Software development
Company size
11 - 50 Employees
Headquarters location
Lehi, UT, US
Year founded
2013