Technical GRC Analyst (Compliance & Assurance)

Accountabilities: • Evaluate the design and operating effectiveness of technical controls, reviewing supporting evidence to confirm that controls are properly implemented, operating effectively, and appropriately documented.

• Conduct technical risk assessments for new technologies, systems, and business initiatives, partnering with Engineering, Security, Product, and other stakeholders to identify and address potential risks.

• Ensure technical controls are aligned with applicable compliance requirements, security practices, and industry standards while balancing regulatory expectations with practical business needs.

• Support and continuously enhance the AI governance program, including AI policies, acceptable-use standards, risk assessments, vendor evaluations, and security controls aligned with ISO 42001.

• Transform compliance and assurance data into meaningful metrics, dashboards, and insights that improve visibility into technical risks, control effectiveness, and overall program maturity.

• Identify and implement opportunities to automate compliance activities, improve evidence collection, and increase the efficiency and scalability of assurance processes.

• Support internal assessments, customer due diligence activities, and external audits by coordinating high-quality technical evidence and providing clear, reliable assurance.

Requirements:

• 8+ years of experience in technical security, Security GRC, regulatory compliance, or a related discipline, with hands-on experience evaluating technical controls and validating supporting evidence.

• Proven experience performing technical risk assessments and collaborating effectively with cross-functional teams within technology organizations and modern cloud or enterprise environments.

• Highly desirable exposure to FedRAMP authorization activities, including NIST 800-53 control implementation, System Security Plan (SSP) development, evidence collection, POA&M management, or readiness assessments.

• Working knowledge of several relevant technical areas, including cloud and security architecture, vulnerability and risk management, secure software development and DevSecOps, data protection and encryption, AI governance and emerging technologies, and dashboard development, reporting, analytics, or automation.

• Strong ability to understand technical concepts, ask thoughtful questions, and translate complex technology topics into practical compliance and risk discussions.

• Sound judgment and analytical thinking when evaluating controls, validating evidence, assessing risk, and balancing compliance requirements with business priorities.

• Collaborative and relationship-oriented approach, with strong communication skills, ownership, process-improvement mindset, and the ability to thrive in a fast-paced startup environment.

Benefits:

• Opportunity to work in a hands-on Technical GRC role with broad exposure to security, engineering, compliance, AI governance, and emerging technologies.

• Remote work opportunity based in Brazil.

• Exposure to modern cloud and enterprise technology environments and cross-functional collaboration.

• Opportunity to contribute to the development and scaling of an AI governance program aligned with ISO 42001.

• Meaningful impact on technical risk visibility, compliance maturity, customer assurance, and operational efficiency.

• Professional growth through involvement in compliance automation, analytics, technical assurance, and emerging technology initiatives.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1