Lead Governance Risk & Compliance Analyst

About UsIntrado is dedicated to saving lives and protecting communities, helping them prepare for, respond to, and recover from critical events. Our cutting-edge company strives to become the most trusted, data-centric emergency services partner by uniting fragmented communications into actionable intelligence for first responders. At Intrado, all of our work truly matters. Responsibilities/Qualifications​​The Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject‑matter expert and operational lead for the organization’s information security governance, risk, and compliance programs.

This role ensures alignment of security policies, standards, and controls with regulatory, contractual, and industry‑recognized frameworks, while supporting business partners in understanding and managing information‑security risk. The Lead GRC Analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due‑diligence requests. This position mentors other analysts, coordinates GRC workflows, facilitates cross‑functional decision-making, and drives continuous improvement in the organization’s risk management and compliance posture.​

Governance and Policy Management Lead development, review, and maintenance of information security policies, standards, and procedures. Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls. Ensure policies comply with regulatory, statutory, and contractual requirements. Advise leadership on security governance best practices and control maturity. Support communication and adoption of governance requirements across the organization. Risk Management and Security Assessments Lead enterprise Information Security risk assessments, including risk identification, analysis, and recommended treatment plans.

Evaluate risks across products, technologies, vendors, and operational processes; ensure alignment with organizational risk tolerance. Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies. Maintain risk registers, metrics, and reporting for leadership visibility. Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology. Compliance and Regulatory Support Lead security compliance initiatives, including internal audits, external audits, SOC 2 readiness, and certification activities.

Coordinate evidence collection, control testing, documentation, and remediation tracking. Ensure adherence to regulatory and contractual obligations relating to information security and privacy. Partner with internal and external auditors to validate control effectiveness. Security Questionnaires and External Requests Oversee completion of customer security questionnaires, RFP responses, and client audits. Ensure accuracy, consistency, and completeness of security representations provided to customers. Manage documentation packages, including security overviews, policy references, and evidence artifacts.

Guide internal teams on compliance commitments and customer requirements. Vendor and Third-Party Security Governance Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements. Support vendor risk classification, onboarding, and ongoing monitoring. Ensure approved vendors adhere to security standards and contractual obligations.

Minimum Education:

Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Business, or related field.

Minimum Experience:

5–7+ years of experience in…