[Hiring] Security GRC Sr Analyst I @LTK USA

Role Description

As a Security GRC Sr Analyst I, you will report to the Sr Manager, Security GRC, and will collaborate heavily with cross-functional teams including Platform, Engineering, Legal and Privacy. Your work will be a critical driver towards providing continuous security compliance monitoring for the LTK platform and supporting systems. You will lead efforts to document our security commitments, ensure compliance with internal and external standards, facilitate risk-informed decision-making, and strengthen the "human firewall" of our organization through robust security awareness programs.

As a senior member of the team, you will not only execute daily operations but also help shape the strategy for how LTK manages security governance and risk.

How you will make an impact

• Compliance Management
  • Maintain a centralized repository of security controls and requirements.
  • Map internal controls to relevant regulatory frameworks and standards (e.g., SOC 2, GDPR, CCPA, PCI-DSS).
  • Serve as the primary point of contact for customer security questionnaires and vendor contract reviews.
  • Coordinate internal and external compliance audits.
  • Manage the evidence collection process and track audit findings (issues) to remediation.
• Risk Management
  • Lead security risk assessments for new projects, technologies, and vendors.
  • Maintain the corporate risk register.
  • Oversee the third-party risk management program.
  • Measure and report on the overall maturity of the security program against established goals and KPIs.
• Policy Management
  • Own the lifecycle of information security policies, standards, and procedures.
  • Collaborate with technical teams to translate complex security requirements into clear, accessible policy language.
• Security Awareness
  • Develop and deliver engaging security awareness training materials.
  • Orchestrate and analyze simulated phishing campaigns.

Qualifications

• 5+ years of relevant experience in Cyber Security Risk and Compliance
• Deep understanding of common security frameworks and standards such as NIST CSF, ISO 27001, SOC 2, and PCI-DSS
• Excellent written and verbal communication skills
• Bachelor’s degree in Computer Science, Information Systems, Business Administration, or equivalent work experience
• Preferred Certifications: CISA, CISSP, CRISC, CISM
• A mindset focused on seizing opportunities and moving with urgency
• Dedication to fierce prioritization and operational excellence
• Adaptability to a dynamic, fast-moving environment
• A growth mindset and openness to feedback

Benefits

• The opportunity to be part of the leading global company in creator commerce
• A remote-first, productivity-first environment
• Competitive compensation and benefits package to meet the needs of you and your family
• 401(k) with LTK company matching
• Medical Insurance, Vision Insurance, Dental Insurance
• Paid Maternity Leave and Paid Paternity Leave
• Summer Fridays and Flexible PTO