GRC Analyst

About Delinea: Delinea is a pioneer in securing identities through centralized authorization, making organizations more secure by seamlessly governing their interactions across the modern enterprise. Delinea allows organizations to apply context and intelligence throughout the identity lifecycle across cloud and traditional infrastructure, data, and SaaS applications to eliminate identity-related threats. With intelligent authorization, Delinea provides the only platform that enables you to discover all identities, assign appropriate access levels, detect irregularities, and immediately respond to identity threats in real-time. Delinea accelerates your teams’ adoption by deploying in weeks, not months, and makes them more productive by requiring 90% fewer resources to manage than the nearest competitor. With a guaranteed 99.99% uptime, the Delinea Platform is the most reliable identity security solution available. Learn more about Delinea on Delinea.com, LinkedIn,  X, and YouTube. 

Join our passionate, global team at Delinea and help us make the world a safer and more secure place. Our success is driven by world-class product leadership, outstanding engineers, and strategic investment from TPG. We value diversity, innovation, and a culture of respect and fairness. If you're ready to push boundaries and challenge the status quo in security, we want to hear from you.  

Apply today to help us achieve our mission.

We’re thrilled to announce the opening of our new office in Mexico City as part of our continued global expansion. This new location not only supports our growing customer base but also opens up new opportunities for innovation and collaboration. Join us and help shape the culture, impact, and success of our Mexico team from day one!

Summary

Delinea’s Cybersecurity organization is seeking a skilled GRC Analyst to play a key role in ensuring Delinea’s alignment and adherence with policies, practice and maintaining the company’s cybersecurity risk management framework and program.

This role requires the ability to work cross-functionally with IT, product engineering and business to enable and deliver on company commitments and objectives.

This is a hybrid role that is based in Mexico City, Mexico and reports to the Director of Information Security and Compliance.

What You'll Do

·         Enforce cybersecurity Process Risk and Control frameworks that are rationalized against applicable laws and standards.

·         Perform cybersecurity risk assessments and maturity assessments.

·         Conduct control readiness assessments to evaluate design, implementation, and effectiveness.

·         Perform vendor security risk reviews and capture effectiveness of vendor controls.

·         Maintain Delinea’s centralized risk register and controls catalog via Delinea’s GRC solution.

·         Maintain Delinea's cybersecurity policies, standards, and procedures.

·         Coordinate as needed with external/internal teams to provide necessary documentation and support.

·         Execute strategy for improving efficiency and ensure organizational procedure alignment to maintain compliance with industry standards.

·         Prepare reports on risk assessments (i.e., cybersecurity, vendors) and compliance status.

·         Function as a trusted advisor for business partners on the design and effective operation of controls.

·         Continuously evaluate and improve cybersecurity risk management processes.

What You'll Need

·         Bachelor’s degree in Computer Science, Information Technology, Business Administration, or a related field.

·         3+ years of relevant work experience.

·         Solid understanding and ability to implement dependable, repeatable, and auditable data protection, privacy, and security controls in accordance with leading compliance standards (e.g., ISO27xxx, SOC2, FedRAMP, CMMC, PCI-DSS).

·         Practical experience in performing security/privacy risk assessments including vendor security reviews.

·         Strong time management, organizational skills, and diligence.

·         Strong verbal and written communication, analytical and people skills.

·         Fluent in English (spoken and written)

We'd Love to See

·         Cybersecurity certifications (e.g. CISSP, CISA, CRISC, CIPP, etc.).

·         Familiarity with OneTrust or other GRC tools.

·         Familiarity with Jira and Confluence

Delinea Culture & Benefits

Why work at Delinea?

• We’re passionate problem-solvers doing our part to make the world a safer place.

• We invest in people who are smart, self-motivated, and collaborative.

• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG—Spirited – Trust – Respect – Ownership – Nimble – Global – and guide our behaviors and success. We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful equity and bonus program, and excellent benefits, including a full suite of medical, dental, and vision insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, generous discretionary time off (DTO), and paid company holidays. We support all families with paid leave for new birth, adoption, surrogacy, or foster-to-adopt primary caregivers.

Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.