{"id":3352385,"url":"https://alion.io/job/cyera-sr-grc-risk-analyst","title":"Sr. GRC Risk Analyst","company":{"id":17615,"name":"Cyera","domain":"cyera.com","url":"https://alion.io/company/cyera-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":{"grade":"A","score":91,"open_postings":11,"ghost_share":0,"stale_share":0.364,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Finance","role_family":"Finance","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Creve Coeur, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"ISO 27001","optional":false},{"name":"ISO 42001","optional":false},{"name":"Jira","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"SOC 2","optional":false},{"name":"EU AI Act","optional":true},{"name":"FedRAMP","optional":true},{"name":"PCI DSS","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-27T18:45:54Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-29T06:46:12Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nWHO WE ARE\nCome join the company at the center of how the world adopts AI securely. Cyera’s mission is to give enterprises the confidence to embrace AI safely - deciding exactly what it can see and do as it reaches deeper into the business. We started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible. That foundation is now the essential AI trust infrastructure for the Fortune 1000. We’re hiring mission-driven talent to put those leaders at the center of our story.\nTHE OPPORTUNITY\nWe are hiring a Senior GRC Analyst- Risk to build and run Cyera's enterprise risk register. You will design the risk management framework, own the full risk lifecycle from identification to closure, and turn risk data into clear decisions for leadership. This is a builder role: you will set the foundation, then operate it at scale as Cyera grows.\nYou will report to the GRC Manager and work closely with Security, Engineering, IT, Legal, Privacy, Finance, and business leaders.\nRESPONSIBILITIES:\nBuild the framework\nDesign and document Cyera's enterprise risk management methodology, including risk taxonomy, scoring model (likelihood and impact), risk appetite and tolerance thresholds, and treatment options\nAlign the program to recognized frameworks such as ISO 27001, NIST CSF and NIST 800-30, SOC 2, and ISO 42001 for AI risk\nEstablish risk ownership, RACI, escalation paths, and governance cadence with the GRC Manager and leadership\nStandardize risk register structure, naming conventions, and ID nomenclature so risks are consistent and audit-ready\nOperate the risk register\nOwn the enterprise risk register end to end: identification, assessment, treatment, monitoring, acceptance, and closure\nRun recurring risk assessments and workshops with control owners and business stakeholders\nTrack treatment plans, remediation due dates, and risk acceptances, and follow up with owners to keep work moving\nMap risks to controls, policies, audit findings, vendor risks, and incidents so the register reflects the full picture\nMaintain evidence and documentation that supports internal and external audits\nReport and influence\nProduce risk reporting and dashboards for the GRC Manager, CISO, and governance committees, including top risks, trends, and KRIs\nTranslate technical and operational risk into clear business language for executives\nPrepare risk inputs for audits, customer security reviews, and board or leadership updates\nImprove and scale\nAutomate intake, scoring, and reporting through GRC tooling and simple workflows (Jira, GRC platforms, spreadsheets) before adding complexity\nIntegrate risk management with TPRM, vulnerability management, incident response, AI governance, and change management\nTrain risk owners and build reusable templates, guides, and playbooks\nRequirements\nREQUIRED QUALIFICATIONS:\n3 to 5 years of experience in GRC, IT risk, information security risk, or enterprise risk management\nHands-on experience building or significantly maturing a risk register and risk assessment process, not just maintaining one\nWorking knowledge of at least two of ISO 27001, NIST CSF, NIST 800-30, NIST 800-53, or SOC 2\nStrong grasp of risk scoring, risk appetite, treatment, and acceptance, and the judgment to apply them practically\nExperience mapping risks to controls and supporting external audits\nAbility to run risk conversations with engineers and executives, and to hold owners accountable without slowing the business\nClear, concise writing and reporting skills\nComfort working in a fast-moving SaaS or cloud environment with changing priorities\nBachelor's degree in a related field, or equivalent experience\nNice to have\nCertifications such as CRISC, CISA, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or ISO 31000 Risk Manager\nExperience with GRC platforms (for example Anecdotes, Drata, Vanta, ServiceNow IRM, or Archer) and Jira workflows\nExposure to AI risk management, ISO 42001, or the EU AI Act\nFamiliarity with multi-framework environments such as PCI DSS, FedRAMP, C5, or ENS\nExperience at a security or data security vendor\nData Privacy and Protection experience\nCOMPENSATION INFORMATION:\nCompensation Range: $100,000 - $120,000.\nThe range represents total compensation, and may include incentive for sales roles, equity or benefits, as applicable.\nThis compensation range represents Cyera’s good faith and reasonable estimate of the range of possible compensation for this role at the time of posting, and Cyera may ultimately pay more or less than the posted range. The final salary for this position will be determined in Cyera’s sole discretion, consistent with applicable law, and based on a variety of factors, including but not limited to the employee’s work experience, skills, and qualifications for the role, as well as the needs of Cyera’s business and other operational considerations.\nFinal compensation will vary based on seniority and relevance of experience, location, and position requirements.\nThis role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors. In addition to a standard benefits and equity package, we offer a generous salary. Final compensation will vary based on seniority and relevance of experience, location, and position requirements.\nThis role may be eligible for potential merit increases based on factors such as individual or company performance, time in role, and other discretionary factors.\nBENEFITS - Why Cyera?\nAbility to work remotely, with office setup reimbursement\nUnlimited PTO\nPaid holidays and sick time\nHealth, vision, and dental insurance\nLife, short and long-term disability insurance","description_format":"text","description_chars":5766,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Equity","Unlimited PTO"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Information Security","Data Loss Prevention"],"lifecycle":[{"event":"open","at":"2026-10-27T18:59:51Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 15","filings_12m":15,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":162500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":44,"reasons":["conf:3","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/cyera-sr-grc-risk-analyst","json_url":"https://alion.io/job/cyera-sr-grc-risk-analyst.json","meta":{"generated_at":"2026-10-29T10:09:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15303,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17615},"rest":"https://alion.io/mcp/rest/get_company?id=17615"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcyera-sr-grc-risk-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcyera-sr-grc-risk-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcyera-sr-grc-risk-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cyera-sr-grc-risk-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcyera-sr-grc-risk-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3352385}},{"tool":"search_jobs","arguments":{"company":"cyera.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3352385},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}