Lead Governance Risk & Compliance Analyst

Intrado Life & Safety, Inc.•Longmont, CO

About The Position

The Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject-matter expert and operational lead for Intrado’s information security governance, risk, and compliance programs. The role ensures that security policies, standards, and controls align with regulatory, contractual, and industry-recognized frameworks while helping business partners understand and manage information-security risk. The analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due-diligence requests. The position also mentors other analysts, coordinates GRC workflows, facilitates cross-functional decision-making, and drives continuous improvement in risk management and compliance. The position may require travel up to 25% of the time depending on business needs. It involves long periods of sitting, typing, and participating in phone or video calls.

Requirements

Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or a related field.
5–7+ years of experience in information security governance, risk, compliance, or audit roles.
Experience supporting or leading security frameworks such as NIST, ISO 27001, or SOC 2.
Experience conducting risk assessments, managing policy programs, and participating in audits.
Experience working cross-functionally with technical and non-technical stakeholders.
Deep knowledge of governance, risk, and compliance frameworks, including NIST CSF, ISO 27001, SOC 2, and regulatory obligations.
Strong understanding of cybersecurity fundamentals, enterprise risk management, and control design.
Ability to interpret and apply security requirements to business processes and technology landscapes.
Proficiency in assessing risk, evaluating controls, and documenting remediation plans.
Exceptional communication skills, including the ability to simplify complex security concepts for diverse audiences.
Strong organizational skills and ability to manage multiple concurrent priorities.
High attention to detail, accuracy, and quality in documentation and evidence preparation.
Ability to influence stakeholders and guide decision-making through expert-level recommendations.
May be required to travel up to 25% of the time depending on business needs.
Able to meet the physical requirements of long periods of sitting, typing, and participating in phone or video calls.

Responsibilities

Lead development, review, and maintenance of information security policies, standards, and procedures.
Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls.
Ensure policies comply with regulatory, statutory, and contractual requirements.
Advise leadership on security governance best practices and control maturity.
Support communication and adoption of governance requirements across the organization.
Lead enterprise information security risk assessments, including risk identification, analysis, and recommended treatment plans.
Evaluate risks across products, technologies, vendors, and operational processes, ensuring alignment with organizational risk tolerance.
Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies.
Maintain risk registers, metrics, and reporting for leadership visibility.
Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology.
Lead security compliance initiatives, including internal and external audits, SOC 2 readiness, and certification activities.
Coordinate evidence collection, control testing, documentation, and remediation tracking.
Ensure adherence to regulatory and contractual information security and privacy obligations.
Partner with internal and external auditors to validate control effectiveness.
Oversee completion of customer security questionnaires, RFP responses, and client audits.
Ensure customer-facing security representations are accurate, consistent, and complete.
Manage documentation packages, including security overviews, policy references, and evidence artifacts.
Guide internal teams on compliance commitments and customer requirements.
Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements.
Support vendor risk classification, onboarding, and ongoing monitoring.
Ensure approved vendors adhere to security standards and contractual obligations.
Mentor other analysts, coordinate GRC workflows, and facilitate cross-functional decision-making.