Senior Operational Risk and Reporting Analyst

Groq•Dallas, NY

About The Position

Groq is seeking a Senior Operational Risk and Reporting Analyst to build and operate continuous GRC risk reporting that explains risk in terms of business impact rather than control counts, and to own the third-party risk program. The role will turn annual risk exercises into a monthly operating rhythm, centralize risk information for leadership, and track remediation across all frameworks. The position includes producing executive-ready monthly reporting and managing vendor risk activities from tiering and assessment through remediation and GRC documentation.

Requirements

At least 5 years of experience in operational risk, IT risk, or GRC.
Experience building and running risk assessment and reporting processes end to end in a regulated environment.
Experience producing monthly risk reporting for risk committees and executives.
Experience testing controls for effectiveness.
Experience evaluating new initiatives for risk exposure before implementation, including third-party risk assessments.

Nice To Haves

Experience with GRC tooling.

Responsibilities

Build and run continuous GRC risk reporting, including risk intake, scoring against the risk methodology, treatment tracking, and risk acceptance with owners and expiry dates.
Centralize risk registers, key risk indicators (KRIs), audit findings, and critical-vendor data in dashboards for leadership.
Produce a monthly risk report for security leadership, framed around business impact and accompanied by executive-ready commentary.
Own the third-party risk program end to end, including vendor tiering, tier-based security assessment cadence, review of vendor SOC 2 and ISO reports, remediation tracking, and clearing the vendor assessment control in the GRC tool.
Track remediation across all frameworks, ensuring each open finding has an owner, a date, and a disposition, and report finding age monthly.