{"id":3425364,"url":"https://alion.io/job/ouryahoo-paranoids-senior-security-grc-analyst","title":"Paranoids Senior Security GRC Analyst","company":{"id":4431646,"name":"Jouw privacykeuzes","domain":"ouryahoo.com","url":"https://alion.io/company/ouryahoo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":128250,"max":266875,"currency":"USD","period":"year","gross":null,"usd_annual":266875},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ChatGPT","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"Jira","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-09-04T00:00:00Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-11-02T04:18:39Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Yahoo serves as a trusted guide for hundreds of millions of people globally, helping them achieve their goals online through our portfolio of iconic products. For advertisers, Yahoo Advertising offers omnichannel solutions and powerful data to engage with our brands and deliver results.A Little About Us\nWhen you impact millions of people every day, you become a large target for adversaries of all types within all layers of the stack. Our job is to keep our users safe and make Yahoo one of the safest places on the Internet. We are the information security team at Yahoo, known as\"The Paranoids.\"\nWithin the Paranoids, the Cyber Risk team exists to guide Yahoo to make reasonable, compliant, cyber risk-conscious decisions. We position security as a business advantage - surfacing actionable cyber risks, facilitating executive risk decisions, and ensuring that security and compliance are aligned with company goals.\nA Lot About You\nWe are looking for a Senior Security GRC Analyst to join the team. This role sits at the intersection of three critical GRC functions: exception management, security risk assessment, and policy and standards management.\nYou will work directly with business leaders, engineers, and Paranoids security teams to identify, assess, document, and communicate security risks - and then help the organization make informed decisions about them. Some days that means writing a risk evaluation memo that goes to the CISO. Other days it means assessing a property's security posture against Paranoids policy, drafting a new standard, or working through the nuances of an exception request with a business unit that's navigating a hard tradeoff.\nWe operate in a modern, fast-moving security landscape. We view AI as a force multiplier that allows us to scale governance, synthesize complex technical data faster, and deliver higher-impact risk insights. The work requires that you understand enough about technology to ask the right questions, exercise sound judgment when evaluating AI-generated outputs, and understand enough about the business to frame risk in terms that drive good decisions.\nResponsibilities\nEvaluate and document known security risks for executive review, ensuring risks are described clearly, contextualized for impact, and paired with actionable treatment options.\n\nManage the end-to-end lifecycle of risk exceptions from intake and evaluation through decision, documentation, and periodic reassessment across Yahoo properties.\n\nConduct property-level and initiative-level security risk assessments against Paranoids policies, industry frameworks, and modern architecture patterns.\n\nDraft, revise, and maintain security policies and standards that set clear, realistic expectations across engineering and product teams.\n\nPartner with stakeholders across the business to socialize new or updated standards, gathering input and building cross-functional alignment before publication.\n\nAct as a trusted liaison between business teams, engineering, and security - translating technical security concepts for non-technical stakeholders and ensuring business context informs risk decisions.\n\nIdentify and implement AI-assisted workflows and automation to eliminate manual GRC tasks, and streamline security exception and policy reviews\n\nBasic Qualifications\n5+ years of experience in security governance, risk management, compliance, or a related information security discipline within modern technology environments.\n\nDemonstrated experience conducting comprehensive security risk assessments and communicating actionable findings to senior leadership and technical teams.\n\nStrong written and verbal communication skills - proven ability to write an executive-ready risk memo, present to leaders, and collaborate effectively with software and infrastructure engineers.\n\nWorking knowledge of security frameworks and risk methodologies (e.g., NIST CSF, ISO 27001, FAIR) and how they apply to real-world cloud infrastructure, web applications, and identity systems.\n\nProven experience developing or managing security policies, standards, or exception/risk acceptance governance programs.\n\nDemonstrated experience using generative AI tools (e.g., Claude, ChatGPT, Gemini, Copilot) to accelerate daily productivity-including drafting documentation, structuring risk analyses, or automating repetitive research workflows.\n\nStrong critical evaluation skills with the ability to exercise judgment in when to apply AI tools versus manual review, paired with an understanding of AI data confidentiality and risk governance.\n\nUnderstanding of regulatory and compliance frameworks applicable to global technology organizations (e.g., SOC 2, PCI DSS, GDPR).\n\nTrack record of continuous process improvement-having established or meaningfully upgraded an assessment program, policy lifecycle, or risk tracking mechanism.\n\nPreferred Qualifications\nExperience working within an information security organization at a large-scale consumer technology or cloud enterprise.\n\nExperience utilizing GRC platforms or risk workflow platforms (e.g., ServiceNow GRC, Archer, Jira) with an interest in configuring automated workflows.\n\nFamiliarity with emerging risk domains, including AI/ML security governance\n\nProfessional security certifications such as CRISC, CISSP, CISA, or CISM.\n\nThe material job duties and responsibilities of this role include those listed above as well as adhering to Yahoopolicies;exercising sound judgment;working effectively, safely and inclusively with others;exhibiting trustworthinessandmeeting expectations;and safeguarding business operations and brand integrity.\nAt Yahoo, we offer flexible hybrid work options that our employees love! While most roles don’t require regular office attendance, you may occasionally be asked to attend in-person events or team sessions. You’ll always get notice to make arrangements. Your recruiter will let you know if a specific job requires regular attendance at a Yahoo office or facility. If you have any questions about how this applies to the role, just ask the recruiter!\nYahoo is proud to be an equal opportunity workplace. All qualified applicants will receive consideration for employment without regard to, and will not be discriminated against based on age, race, gender, color, religion, national origin, sexual orientation, gender identity, veteran status, disability or any other protected category. Yahoo will consider for employment qualified applicants with criminal histories in a manner consistent with applicable law. Yahoo is dedicated to providing an accessible environment for all candidates during the application process and for employees during their employment. If you need accessibility assistance and/or a reasonable accommodation due to a disability, please submit a request via the Accommodation Request Form (www.yahooinc.com/careers/contact-us.html) or call +1.866.772.3182. Requests and calls received for non-disability related issues, such as following up on an application, will not receive a response.\nWe believe that a diverse and inclusive workplace strengthens Yahoo and deepens our relationships. When you support everyone to be their best selves, they spark discovery, innovation and creativity. Among other efforts, our 11 employee resource groups (ERGs) enhance a culture of belonging with programs, events and fellowship that help educate, support and create a workplace where all feel welcome.\nThe compensation for this position ranges from $128,250.00 - $266,875.00/yr and will vary depending on factors such as your location, skills and experience.The compensation package may also include incentive compensation opportunities in the form of discretionary annual bonus or commissions. Our comprehensive benefits include healthcare, a great 401k, backup childcare, education stipends and much (much) more.Currently work for Yahoo? Please apply on our internal career site.","description_format":"text","description_chars":7908,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-28T22:14:02Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.689,"p_room":0.35,"age_days":59,"expected_fill_days":29,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-11-02T06:13:15Z"},"pay":{"stated_usd_annual":266875,"is_top_pay":true},"html_url":"https://alion.io/job/ouryahoo-paranoids-senior-security-grc-analyst","json_url":"https://alion.io/job/ouryahoo-paranoids-senior-security-grc-analyst.json","meta":{"generated_at":"2026-11-02T13:54:43Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19007,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431646},"rest":"https://alion.io/mcp/rest/get_company?id=4431646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fouryahoo-paranoids-senior-security-grc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fouryahoo-paranoids-senior-security-grc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fouryahoo-paranoids-senior-security-grc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ouryahoo-paranoids-senior-security-grc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fouryahoo-paranoids-senior-security-grc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3425364}},{"tool":"search_jobs","arguments":{"company":"ouryahoo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3425364},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}