Senior Governance Risk and Compliance Analyst
Hiring Intelligence & Application Guidance
Direct ATS application. Include measurable achievements and core keywords from the job description.
Initial recruiter screening → Hiring Manager interview → Role-specific practical assessment.
Compensation benchmarked against current US national market averages (USD).
US Employment Authorization verified for direct application.
Role Overview & Responsibilities
RainFocus, one of the most innovative software companies, is in search of an exceptional Senior Governance, Risk, and Compliance (GRC) Analyst.
About RainFocus
RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market â it will be challenging, fun, and exciting.
About the Role
We are seeking a highly skilled and motivated Senior GRC Analyst to join our Security and Privacy team. In this role, you will own and grow RainFocus's governance, risk, and compliance program â maintaining our control framework, leading risk assessments, supporting audits, and driving the program's maturity forward rather than simply maintaining the status quo. You will report directly to the CISO and have significant ownership from day one.
\nBachelor's degree in Technology, Cybersecurity, or a related field is highly desirable.
6+ years of proven experience in GRC, IT audit, information security compliance, or a related field.
In-depth knowledge of relevant regulations, standards, and frameworks (e.g., SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and others).
Experience running or contributing heavily to formal risk assessments â not just tracking a compliance checklist.
Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable.
Familiarity with modern security tooling such as Drata, OneTrust, Vanta, etc.
Strong analytical and problem-solving skills, with keen attention to detail.
Excellent communication and interpersonal skills to work effectively with technical and non-technical stakeholders.
Ability to manage multiple projects and meet deadlines in a fast-paced environment.
Experience with cloud security and compliance frameworks is a plus.
Experience with OneTrust or related GRC technologies is a plus.
Strong work ethic and commitment to excellence.
Ability to work independently and as part of a team.
Excellent problem-solving and analytical skills.
Strong communication and interpersonal skills.
Ability to adapt to change and learn quickly.
Passion for security and privacy.
Why work at RainFocus?
At RainFocus we delight millions of attendees at large-scale events by delivering better insights, experiences, and marketing. We were able to pivot our product and services offering in 2020 to continue growing and serving new clients and events.
As a member of the RainFocus team, you will have the opportunity to experience first-hand the impact of our platform at events around the world. Additionally, RainFocus offers competitive salaries, competitive benefits, 401k, generous PTO, and countless other team building activities.
What are you waiting for? Apply today! We need more talented, hard-working, fun-loving team members just like yourself!
Please mention the word **INSIGHTFULLY** and tag RMjQwMjo4NzgwOjEwMTU6YmZjMjo5YTA6NmMyMjo4NTI4OjY2YWI= when applying to show you read the job post completely (#RMjQwMjo4NzgwOjEwMTU6YmZjMjo5YTA6NmMyMjo4NTI4OjY2YWI=). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.
Interested in this role at RainFocus?
Apply directly through the verified employer application pipeline.
