Senior Governance Risk and Compliance (GRC) Analyst

IREN•San Francisco, CA

9h•$165,000 - $190,000

About The Position

IREN is a vertically integrated AI Cloud provider, delivering large-scale data centers and GPU clusters for AI training and inference. IREN’s platform is underpinned by its expansive portfolio of grid-connected land and power in renewable-rich regions across North America, Europe and APAC. With 100% renewable energy, we build, own and operate our data centers and take pride in being at the forefront of sustainable solutions for the ever-evolving applications of high-performance compute. We believe that human progress is invaluable, but it should be done in the right way – responsibly, sustainably and having a positive impact on the communities we operate in.

Requirements

Bachelor’s (or Master’s) degree in Information Security, Risk, Business or equivalent.
5-7 years of experience in cybersecurity, IT program management, or a related field.
Proven track record leading at least one successful FedRAMP authorization.
Deep knowledge of the FedRAMP framework, NIST 800-53 controls, and supporting documentation.
Audit/assessment experience using risk-based frameworks.
Familiarity with cloud security architecture and adjacent frameworks (SOC 2, ISO 27001, HITRUST, etc.)
Strong communication and relationship-building skills across technical and executive levels.
Demonstrated analytical and problem-solving skills, highly organized and detail oriented.
Experience engaging with government agencies or federal sector stakeholders is highly desirable.

Nice To Haves

Relevant certifications (CISM, CISA, CRISC, CISSP, ISO 27001 Lead Implementor) strongly preferred.

Responsibilities

Lead enterprise-wide risk assessment programs, identify strategic risks, recommend mitigation and monitor residual risk.
Develop and maintain governance frameworks that align business objectives with regulatory/compliance requirements and security best practices.
Execute the company's FedRAMP authorization program from strategy through implementation.
Manage relationships with 3PAOs, consultants, and other external partners to facilitate assessments and drive progress.
Lead the preparation and submission of all FedRAMP deliverables, including the System Security Plan (SSP), policies, procedures, and supporting security documents.
Develop and maintain security and privacy policies, standards, and control frameworks aligned with ISO 27001, SOC 2, HITRUST, FedRAMP, and other global regulations
Support policy approvals, exception handling, and attestation processes while identifying opportunities for automation and process improvements.
Lead and execute enterprise risk assessments, including vendor and process-level reviews.
Support IREN's Third-Party Risk Management program including vendor assessments, monitoring, and remediation tracking
Lead readiness and response efforts for ISO 27001, HITRUST, FedRAMP and other audits and certifications.
Keep abreast of emerging regulatory, technological and business-risks, and drive improvements to the GRC program accordingly.

Benefits

Base salary
Annual performance incentives
Equity programs
100% company paid health insurance premiums (medical, dental, and vision) for employees
75% company paid coverage for dependents
Company-paid short-term and long-term disability insurance
Voluntary life, critical illness, and accident coverage available
Health Savings Accounts (HSA) – when combined with the High Deductible Health Plan
Employee Assistance Program and wellness resources
401(k) retirement plan with company match
Access to financial planning and legal services
Paid Time Off (PTO)
Paid holidays
Internal skills training and advancement pathways
Professional development to support certifications, continuing education, or role related training
Company events and team-building activities
Relocation or Living-out-allowance / per diem (as applicable and based on successful candidate circumstances)