Senior Security Analyst - Governance, Risk, and Compliance (GRC)
Blackbaud (company site, opens in a new tab)3+ yrsHyderabadOn-siteDirect career pageEst. 10–18 LPA
Posted 13h ago
Reach people at Blackbaud
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Blackbaud you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Lead and manage the cybersecurity compliance program aligning with frameworks including NIST CSF, PCI-DSS, AICPA SOC 2, and CSA Cloud Controls Matrix.
- Oversee risk assessment processes, root cause analysis for control deviations, and control remediation prioritization.
- Develop executive-level control effectiveness reports and actively participate in governance forums to advocate cybersecurity best practices.
Minimum Requirements
- Bachelor's Degree in computer science, computer engineering, management information technology, cyber security, or equivalent experience.
- At least 3 years experience in IT audit or compliance testing.
- Minimum 2 years experience with cybersecurity control frameworks such as NIST CSF, AICPA SOC 2, and Cloud Controls Matrix.
- Experience with corporate GRC solutions (e.g. ServiceNow, Archer) and working in agile teams.
Ideal Candidate Profile
- Background in financial services or other highly regulated industries reflecting domain expertise in compliance and risk.
- Demonstrated ability to communicate and present cybersecurity risk and control effectiveness to executive stakeholders.
- Familiarity with AI tools (Anthropic, Microsoft), and holding relevant industry certifications like CISSP, CRISC, CISM, CISA, or cloud certifications (AWS/Azure).