Security GRC Senior Analyst

Who you are

• Bachelor’s degree in Information Security, IT/Computer Science, or equivalent
• Industry certifications such as CompTIA Security+ or equivalent
• Experience with various industry security frameworks such as ISO 27001, NIST SP 500-53
• Experience driving remediation across technical teams
• 3+ years of experience in Information Security, AI, Automation or related roles
• 0-1 years hands on experience in the development of Agentic AI use cases and usage of various LLMs
• Prior experience using the NIST SP 800-53 framework for the purposes of GovRAMP and CMMC compliance programs

What the job involves

• We are seeking a motivated and detail-oriented Senior Analyst, Security Governance, Risk & Compliance (GRC) to join our Information Security team
• This role is focused on management of security compliance programs at Barracuda which have a global reach, and is inclusive of both coordinating an annual cycle of externally-led audits related to those programs, as well maturing the health of the audit scope by leading the continued adoption of related controls across Barracuda’s IT and Product business units
• This role will report to the Director of Security Governance, Risk & Compliance (GRC)
• The ideal candidate will have a keen interest in cutting edge technologies and how they can be used to transform and reimagine how security compliance related programs operate
• You will help to drive structured programs, while simultaneously maturing them to enable them to become highly scalable, automated, and data-driven
• Own and lead the coordination of external audit cycles related to US Federal Security Compliance Programs and State and Local Government Compliance (SLED) programs, inclusive of such CMMC and GovRAMP Core & Moderate
• Leading and coordinating the implementation of security controls internally on in-scope applications as part of readiness activities
• Leading gap analysis initiatives, leveraging internal tools and technologies to modernize how we self-assess
• Coordinating ongoing continuous monitoring obligations with external entities (eg monthly, quarterly)

Benefits

• High-quality health benefits
• Retirement Plan with employer match
• Career-growth opportunities
• Flexible Time Off and Paid Time Off benefits
• Volunteer opportunities
• Equity, in the form of non-qualifying options