Lead Governance Risk & Compliance Analyst
Listed on 2026-11-04
-
IT/Tech
Information Security & Data Protection, Cybersecurity, Security Management & Operations
- Longmont, Colorado
Lead Governance Risk & Compliance Analyst
- Longmont, Colorado
- Engineering & Technology
- Hybrid
- 4688
Intrado Life & Safety, Inc.
About UsIntrado is dedicated to saving lives and protecting communities, helping them prepare for, respond to, and recover from critical events. Our cutting-edge company strives to become the most trusted, data-centric emergency services partner by uniting fragmented communications into actionable intelligence for first responders. At Intrado, all of our work truly matters.
Responsibilities/QualificationsThe Lead Governance, Risk & Compliance (GRC) Analyst serves as the senior subject‑matter expert and operational lead for the organization’s information security governance, risk, and compliance programs. This role ensures alignment of security policies, standards, and controls with regulatory, contractual, and industry‑recognized frameworks, while supporting business partners in understanding and managing information‑security risk. The Lead GRC Analyst provides advanced guidance on cybersecurity requirements, leads risk assessments, oversees audit readiness, manages policy lifecycle activities, and supports customer and regulatory due‑diligence requests.
This position mentors other analysts, coordinates GRC workflows, facilitates cross‑functional decision‑making, and drives continuous improvement in the organization’s risk management and compliance posture.
- Lead development, review, and maintenance of information security policies, standards, and procedures.
- Facilitate governance processes, including exception reviews, policy updates, and alignment with enterprise controls.
- Ensure policies comply with regulatory, statutory, and contractual requirements.
- Advise leadership on security governance best practices and control maturity.
- Support communication and adoption of governance requirements across the organization.
- Lead enterprise Information Security risk assessments, including risk identification, analysis, and recommended treatment plans.
- Evaluate risks across products, technologies, vendors, and operational processes; ensure alignment with organizational risk tolerance.
- Collaborate with Product, Engineering, Legal, and Operations leaders to guide mitigation strategies.
- Maintain risk registers, metrics, and reporting for leadership visibility.
- Support application of the Information Security Risk Management Framework and ensure consistent use of risk methodology.
- Lead security compliance initiatives, including internal audits, external audits, SOC 2 readiness, and certification activities.
- Coordinate evidence collection, control testing, documentation, and remediation tracking.
- Ensure adherence to regulatory and contractual obligations relating to information security and privacy.
- Partner with internal and external auditors to validate control effectiveness.
- Oversee completion of customer security questionnaires, RFP responses, and client audits.
- Ensure accuracy, consistency, and completeness of security representations provided to customers.
- Manage documentation packages, including security overviews, policy references, and evidence artifacts.
- Guide internal teams on compliance commitments and customer requirements.
- Perform or lead vendor security risk assessments, including analysis of controls, compliance posture, and contractual security requirements.
- Support vendor risk classification, onboarding, and ongoing monitoring.
- Ensure approved vendors adhere to security standards and contractual obligations.
- Bachelor’s degree in Information Security,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).