GRC Analyst

Metropolis•Los Angeles, CA

6d•Onsite

About The Position

Metropolis is seeking a Governance, Risk, and Compliance (GRC) Analyst to join our expanding Security team. Reporting to the Senior Manager, GRC, you will mature information security policies, drive employee security awareness, and pioneer our AI governance framework. You will partner across Technology, Legal, Internal Audit, Procurement, and People Operations to safeguard customer trust and support operational excellence.

Requirements

3+ years of experience in information security GRC, cybersecurity training, or technology compliance
Proven track record of managing required security awareness programs and driving cross-functional accountability
Experience with modern training orchestration platforms and understanding of AI and machine learning data security
Working knowledge of standard industry frameworks, specifically SOC 2 and PCI-DSS
Communication skills with the ability to explain complex regulatory needs to non-technical employees
Bachelor’s degree in Cybersecurity, Information Systems, or an equivalent technical discipline

Nice To Haves

GRC certifications such as CISA or CRISC

Responsibilities

Author, update, and enforce corporate security policies to guarantee cross-departmental compliance
Deploy and manage required information security training campaigns as the platform owner
Transform static policies into interactive modules with comprehension quizzes for mandatory sign-offs
Establish and enforce an internal AI governance framework with Data, Legal, and Tech teams
Conduct structured risk assessments on emerging tools and internal AI models to maintain behavioral guardrails
Report training metrics, policy exceptions, and risk postures directly to senior management
Review vendor security profiles and software pipelines to mitigate security risk