Information Security Analyst

Overview

Security Governance, Risk & Compliance (GRC) Analyst – Nutanix – San Jose, CA (Onsite) – 1 Year Contract – Pay Rate:
Market

Nutanix is seeking a Security GRC Analyst to support Governance, Risk & Compliance initiatives, including risk assessments, compliance, audits, third-party risk, security reporting, and AI-driven automation. The role involves working with security, engineering, and business teams to strengthen security programs and modernize GRC processes.

• Support GRC operations, risk management, compliance, audits, and policy management.
• Perform security and third-party risk assessments; track remediation activities.
• Manage compliance programs and respond to customer security questionnaires.
• Develop AI-powered GRC solutions using LLMs, AI Agents, Python, APIs, and low-code platforms
  .
• Automate security questionnaires, risk assessments, evidence collection, control testing, and KPI/KRI reporting.
• Build AI-driven risk scoring models and ensure AI governance aligns with ISO 42001 and the EU AI Act
  .
• Collaborate with Security, Engineering, and Data teams to deliver scalable automation.

• 4+ years of experience in GRC, Information Security, or Risk Management
  .
• Experience with ISO 27001, ISO 42001, NIST, CAIQ, SOX, GDPR, EU AI Act, SOC 1 & SOC 2.
• Knowledge of CISSP security domains, security controls, audits, and risk methodologies.
• Hands-on experience with Python, APIs, AI/LLM-based workflows, AI Agents, or low-code automation
  .
• Strong communication, project management, analytical, and stakeholder management skills.
• Ability to work independently with global teams and manage multiple priorities.