GRC Regulatory Compliance Senior Analyst
Listed on 2026-09-22
-
IT/Tech
Cybersecurity, Information Security & Data Protection
Kura Sushi USA is a publicly traded U.S. company established in 2008 as a subsidiary of Kura Sushi, Inc. We are an innovative and tech interactive Japanese restaurant chain serving up the ultimate eater-tainment dining experience with a combination of premium ingredients, advanced technology, and affordable prices to create a one-of-a-kind revolving sushi dining experience.
Come join the Kura Krew!
This position is based in Irvine, CA and requires candidates to reside within a reasonable commuting distance of our Irvine office. Team members are expected to work onsite a minimum of one day per week, with additional in-office presence required based on division responsibilities and business needs. This is not a remote position.
The GRC Senior Regulatory Compliance Analyst, who has proficient knowledge in regulatory compliance rules and regulations will be responsible for assisting the Integrated GRC Senior Manager (Juris Doctorate) for ensuring Kura meets all applicable legal, regulatory, and internal regulatory compliance requirements and facilitating centralized monitoring. This includes but not limited to:
- Evaluating regulatory laws applicable to Kura business operations
- Conducting compliance audits and reviews to ensure execution of compliance standards
- Preparing and presenting compliance reports to the VP of ACAS and other applicable executives
- Identifying compliance issues requiring follow-up or investigation
- Disseminating written policies and procedures related to compliance activities
Collaborating with cross-functional departments to foster a culture of compliance - Other responsibilities include but not limited to facilitating/moderating annual regulatory compliance risk assessments, reviewing contracts containing PII, system components, MNDA, performing compliance assessments/reviews, monitoring compliance activities /remediation efforts, conducting investigations, and providing guidance and facilitation to cross-functional peers and senior management relating to various regulatory compliance that Kura is subject to such as CCPA/CPRA, PCI, Information Security (Cybersecurity), Artificial Intelligence, Information Technology standards and Frameworks, FDA, ESG, SOX etc
In addition, the GRC Regulatory Compliance Senior Analyst will partner with/provide guidance to the GRC Senior Security Analyst and the Head of Information Technology, when applicable, in designing/implementing information services (IT and security) solution components used throughout Kura Sushi’s environment as well as liaising with the Internal Audit team for in-scope SOX systems.
The GRC Regulatory Compliance Senior Analyst will be responsible for assisting the Integrated GRC Senior Manager in facilitating Kura’s vendor relationships with several outsourced service providers as needed in establishing a scalable and compliant environment to support the Company’s compliance landscape to include security and technological components.
Key Responsibilities- Policy & Procedure Development:
Draft, review, and update privacy and compliance policies, procedures, and training materials to align with evolving laws and regulations - Regulatory Monitoring:
Research and interpret new or revised laws, regulations, and industry standards; track changes and recommend updates to the compliance program - Risk Assessment & Auditing:
Conduct risk assessments, compliance audits, and testing of controls to identify gaps and deficiencies; develop and implement gap closure plans - Training & Culture:
Lead or assist in compliance training programs for new hires and ongoing staff, promoting a culture of compliance - Cross-Functional Collaboration:
Work with legal, finance, operations, and other departments to integrate compliance into business processes(e.g.,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).