Senior GRC Analyst

Responsibilities

• Architect and lead the implementation of an Integrated Management System (IMS) across multiple ISO standards
• Manage cross-functional projects to achieve and maintain product-level compliance certifications
• Lead annual and ad-hoc risk assessments and maintain a dynamic risk register
• Design and implement controls that balance compliance with engineering velocity
• Author and maintain enterprise-level security policies, standards, and procedures
• Act as a GRC subject matter expert for on-call rotations and customer inquiries

Requirements

• 5+ years of experience in GRC, preferably at a technology company
• Proven track record of leading multi-certification and multi-standard compliance programs
• Experience building and maturing ISO programs
• Expertise in risk identification and assessment methodologies
• Ability to translate complex regulatory requirements into actionable controls for engineering teams
• Strong project management skills for managing complex, multi-quarter roadmaps

Preferred Qualifications

• Relevant industry certifications such as CRISC or ISO 27001 Lead Implementer
• Familiarity with privacy legislation (e.g., GDPR/CCPA) related to ISO 27701

About the Company

DigitalOcean is a cloud provider that aims to simplify cloud and AI for builders, providing scalable infrastructure for developers and small-to-medium businesses.