Sr. GRC Analyst

Required Qualifications

• 4+ years of experience in Governance, Risk, and Compliance, Information Security, IT Audit, or a related discipline.
• Hands-on experience operating or configuring GRC tools such as ServiceNow GRC / IRM, Drata, Vanta, or Hyperproof to automate and manage compliance workflows.
• Demonstrated experience owning GRC projects, compliance deliverables, or process-improvement initiatives from planning through completion.
• Strong working knowledge of SOC 2 or ISO/IEC 27001:2022. Familiarity with HIPAA and other healthcare-related compliance requirements is preferred.
• Experience with control design, evidence evaluation, risk assessments, audit support, remediation tracking, or compliance testing.
• Experience improving manual compliance processes through automation, workflow design, or system-based reporting.
• Strong written and verbal communication skills, with the ability to explain risk and compliance concepts to both technical and non-technical audiences.
• Demonstrated ability to work independently, manage competing priorities, anticipate next steps, and escalate risks early.
• Experience collaborating across Information Security, IT, Engineering, Legal, Privacy, Finance, Audit, and business teams.
• Bachelor’s degree in IT / CS is preferred.
• CISA, CISSP (or CISSP Associate), CCSP, ISO 27001 credential, or another relevant security or compliance certification is preferred.
• Experience with additional security, compliance, AI governance, and privacy frameworks or regulatory requirements, such as ISO/IEC 42001, NIST AI RMF, NIST CSF, GDPR/UK GDPR, and CCPA/CPRA, is a plus.
• Experience with ServiceNow GRC / IRM implementation, administration, configuration, or integration is preferred.
• Experience developing GRC metrics, dashboards, key performance indicators, or leadership reporting is preferred.
• Experience supporting internal or external audits in a regulated or healthcare-related environment is preferred.

Core Role Criteria

What We Offer

• Free premium medical, dental, life and vision insurance
• Generous 401(k) match
• Aya also offers other benefits to those that are eligible and where required by applicable law, including reimbursements and discretionary bonuses
• Aya provides paid sick leave in accordance with all applicable state, federal, and local laws. Aya’s general sick leave policy is that employees accrue one hour of paid sick leave for every 30 hours worked. However, to the extent any provisions of the statement above conflict with any applicable paid sick leave laws, the applicable paid sick leave laws are controlling
• Celebrations! We hit our goals and reward ourselves.
• Company-sponsored virtual events, happy hours and team-building activities are always on the horizon — plus, you get a special treat on your birthday!
• Unlimited DTO — we believe in time off!
• Virtual yoga, meditation or boot camp classes offered daily

Compensation

• Aya reasonably anticipates the pay scale for this position to be an annual salary of $105,000 to $135,000.
• The pay scale for this position may vary if applicant possesses experience outside of what Aya reasonably anticipates for this position. Bonuses are subject to the role and your manager’s discretion.
• Aya is an Equal Opportunity Employer (EEO), including Disability / Vets, and welcomes all to apply. Please click here for our EEO policy