Senior Risk Analyst

Our team is seeking a Senior Risk Analyst with the passion and skills to support the evolution of our corporate Information Security GRC Team. You will help us define processes and implement technology to support a comprehensive enterprise security program, including governance, risk, and compliance (GRC). You will ensure we are designing and evolving technologies in consideration of employee needs, supporting long-range strategy, cross-functional projects, and initiatives across Crunchyroll globally. You will build strong partnerships across Crunchyroll’s teams, including Legal, Engineering, IT, People, Workplace Experience, Trust & Safety, as well as third-party contractors, and suppliers.
This position reports to the Senior Manager of GRC. This is a hybrid role and would require the person to be in our Dallas, TX office.

• You have 8+ years supporting GRC programs in Information Security or Information Technology 

• You have experiencing leading PCI, SOX, and Audit (internal and external) assessments 

• You have experience with cloud-based platforms such as GCP and AWS

• You have experience with IAM best practices and administration

• You have a strong fundamental understanding of security best practices and frameworks such as PCI, NIST, and ISO

• You have experience with control testing and evidence validation

• You have experience performing risk assessments 

• You have experience with Vendor Management

• You have experience working with and optimizing GRC tools

• You understand your audience, from technical staff to management

• You have demonstrated experience maintaining effective working relationships across all levels of an organization and with a variety of external constituents

• You are curious and want to grow in a security-focused environment 

• Pluses

  • You have security certification(s)

  • You have knowledge of data privacy laws and regulations, including GDPR, CCPA

  • You have experience with cloud environments such as GCP or AWS

  • You have a BS in Computer Science or a related or have equivalent experience

• Working with a focus to level-up Information Security GRC at Crunchyroll

• Partnering with teams across the company to implement and govern security standards to improve compliance adherence

• Supporting and improving processes related to the Vulnerability Management Program

• Investigating and assessing control effectiveness and maturation

• Monitoring and facilitating governance activities

• Staying up to date on regulatory trends

• Creating reports and documentation to support the Information Security GRC program

In addition to getting to work with fun, passionate and inspired colleagues, you will also enjoy the following benefits and perks:

#LifeAtCrunchyroll #LI-Hybrid