{"id":2515412,"url":"https://alion.io/job/drivetime-senior-analyst-grc-remote","title":"Senior Analyst, GRC - Remote","company":{"id":2430651,"name":"DriveTime","domain":"drivetime.com","url":"https://alion.io/company/drivetime-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":11,"ghost_share":0,"stale_share":0.818,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rio de Janeiro, Brazil","United States"],"countries":["BR","US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":107000,"max_usd":190000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST 800-53","optional":true},{"name":"PCI DSS","optional":true}],"status":"live","first_seen_at":"2026-10-13T00:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T14:10:57Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"What’s Under the Hood\nDriveTime Family of Brands is the largest privately owned used car sales finance & servicing company in the nation. Headquartered in Tempe, Arizona and Dallas, Texas, we create opportunities and improve the lives of our customers and our employees by placing a focus on putting the right customer, in the right vehicle, on the right terms and on their path to ownership.\nThe DriveTime Family of Brands spans across DriveTime, Bridgecrest and SilverRock. You can find us at the intersection of technology and innovation as we use our proprietary tools and over two decades of industry knowledge to redefine the process of purchasing, financing, and protecting your vehicle.\nThat’s Nice, But What’s the Job?\nIn short, this role is for a seasoned cybersecurity professional who thrives at the intersection of governance, risk, compliance, and business partnership. As a Sr. GRC Analyst, you will play a key role in helping the organization identify, assess, manage, and communicate cybersecurity risk while supporting compliance obligations, audits, policy governance, third-party security reviews, and security awareness initiatives. You'll serve as a trusted advisor across the business, translating technical security findings into meaningful business risk and driving practical solutions that strengthen the organization's security posture.\nIn long, as the Sr. GRC Analyst, you will be responsible for:\nLeading Information Security risk assessments and cyber risk management activities, including risk identification, analysis, scoring, treatment planning, documentation, tracking, and reporting.\nPerforming Information Security compliance monitoring and control assessments against policies, standards, frameworks, contractual obligations, and regulatory requirements.\nLeading assigned GRC services such as policy governance, audit support, third-party security assessments, due diligence activities, and security awareness programs.\nProviding subject matter expertise, risk guidance, reporting, process improvement recommendations, and mentorship within the GRC function.\nIndependently facilitating risk assessments and evaluating control effectiveness across technology and business environments.\nDeveloping clear risk statements and practical risk treatment recommendations for management review and decision-making.\nSupporting internal and external audits by coordinating evidence collection, interpreting requests, and tracking remediation efforts.\nConducting cybersecurity assessments of third-party vendors and collaborating with business partners to address identified risks.\nCoordinating responses to security due diligence questionnaires, insurance inquiries, and external security assessments.\nManaging the Information Security policy lifecycle, including drafting, reviewing, updating, tracking approvals, and supporting periodic reviews.\nSupporting and enhancing security awareness and education initiatives through communications, campaigns, training content, and reporting.\nMaintaining GRC processes, procedures, methodologies, and performance metrics while identifying opportunities for continuous improvement.\nProviding guidance and mentoring to less-experienced analysts and promoting consistent GRC practices across the organization.\nPerforming other duties as assigned.\nSo What Kind of Folks Are We Looking For?\nStrong understanding of cybersecurity risk management, governance principles, security controls, and compliance assessment methodologies.\nAbility to translate technical security findings into clear business risks and actionable recommendations.\nStrong analytical, critical-thinking, and problem-solving skills.\nExcellent written and verbal communication abilities with the confidence to engage stakeholders at all levels.\nAbility to facilitate discussions and present complex information to technical and non-technical audiences.\nStrong organizational skills with the ability to prioritize multiple projects and deadlines.\nCollaborative mindset with the ability to build effective partnerships across Information Security, Technology, Legal, Compliance, Internal Audit, Vendor Management, and business teams.\nSelf-starter mentality with the ability to take ownership of programs, services, and process improvements.\nPassion for mentoring and developing others while fostering high-quality and consistent work practices.\nStrong attention to detail and commitment to continuous learning in the cybersecurity and risk landscape.\nThe Specifics.\n4+ years of experience in Information Security GRC, cybersecurity risk management, IT compliance, IT audit, security assurance, or a related discipline.\nBachelor’s degree in Information Security, Cybersecurity, Information Technology, Business, Risk Management, Audit, or a related field, or an equivalent combination of education and experience.\nDemonstrated experience independently conducting risk assessments, evaluating controls, documenting findings, and developing remediation or risk treatment recommendations.\nExperience supporting and improving GRC processes, methodologies, workflows, and enabling technologies.\nFamiliarity with the NIST Cybersecurity Framework (CSF) and Information Security risk and control concepts.\nNice To Haves.\nExperience working with frameworks and requirements such as NIST 800-53, PCI DSS, SOC reporting, GLBA/FTC Safeguards Rule, or state privacy and security regulations.\nProfessional certifications such as CISSP, CISA, CRISC, Security+, or similar cybersecurity, risk, or audit-related credentials.\nExperience with third-party risk management, security awareness programs, privacy initiatives, technology audits, or related cybersecurity domains.\nExperience supporting audit and compliance programs in highly regulated environments.\nExposure to security governance, policy management, and enterprise risk reporting.\nSo What About the Perks? Perks matter\n Work From Home. Feel free to rock the casual wear while still being camera ready. You will be working from your home office (in an approved city & state) and make sure you have a conducive and quiet workspace with no distractions and reliable and secure internet.\nMedical, dental, and vision, oh my! DriveTime Family of Brands covers a sizable amount of insurance premiums to ensure our employees receive top-tier healthcare coverage. \n But Wait, There’s More. 401(K), Company paid life insurance policy, short and long-term disability coverage to name a few.\nGrowth Opportunities. You grow, I grow, we all grow! But seriously, DriveTime Family of Brands is committed to providing its employees with every opportunity to grow professionally with roughly over 1,000 employees promoted year over year.\nTuition Reimbursement. We’re as passionate about your professional development as you are. With that, we’ll put our money where our mouth is.\nWellness Program. Health is wealth! This program includes self-guided coaching and journeys, cash incentives and discounts on your medical premiums through engaging in fun activities!\nGratitude is Green. We offer competitive pay across the organization, because, well… money matters!\n Paid Time Off. Not just lip service: we work hard, to play hard! Paid time off includes (for all full-time roles) wellness days, holidays, and good ole' fashioned YOU time! For our Part-timers, don't fear you get some time too...vacation time is available - the more you work, the more you earn!\nAnything Else? Absolutely.\nDriveTime Family of Brands is Great Place to Work Certified! And get this: 90% of our rockstar employees say they feel right at home here. We could spend a lot of time having you read about ALL our awards, but we’ll save time (and practice some humility) just naming a few others; Comparably Awards: Best Company for Diversity, Best Company Culture and Best Company Leadership, oh and don’t forget Phoenix Business Journal Healthiest Employers (okay, we’ll stop there)!\nHiring is contingent upon successful completion of our background and drug screening process. DriveTime is a drug-free, tobacco-free workplace and an Equal Opportunity Employer.\nAnd when it comes to hiring, we don't just look for the right person for the job, we seek out the right person for DriveTime. Buckle up for plenty of opportunities to grow in a professional, fun, and high-energy environment!","description_format":"text","description_chars":8316,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Growth opportunities","Home office","Life insurance","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Commerce","Information Security","Leasing, Auto & Equipment Finance"],"lifecycle":[{"event":"open","at":"2026-10-14T09:45:12Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":26,"reasons":["conf:15","stale_co","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/drivetime-senior-analyst-grc-remote","json_url":"https://alion.io/job/drivetime-senior-analyst-grc-remote.json","meta":{"generated_at":"2026-10-15T09:16:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":1617,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2430651},"rest":"https://alion.io/mcp/rest/get_company?id=2430651"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdrivetime-senior-analyst-grc-remote"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdrivetime-senior-analyst-grc-remote"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdrivetime-senior-analyst-grc-remote"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/drivetime-senior-analyst-grc-remote\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdrivetime-senior-analyst-grc-remote"}]}