Staff Security Analyst II (GRC)

Blue Yonder is a global leader in AI-driven digital supply chain solutions. The Staff Security Analyst II, GRC will ensure product and internal processes operate with appropriate IT and security controls, partner with cross-functional teams, and manage audit engagements. The role leads control assessments, remediation activities, audit preparation, and compliance reporting.

Responsibilities:

• Lead internal IT and security control assessments aligned with best practice standards and frameworks (ISO 27001/27701/22301, SOC1/2 Type II, etc.)
• Identify control deficiencies and drive remediation activities with stakeholders
• Support evidence collection and documentation of controls in support of internal and external audits
• Regularly communicate compliance posture to stakeholders and leadership
• Stay current with regulatory and security compliance standards and frameworks
• Train and prepare control owners for audit participation and evidence collection
• Plan, coordinate and manage internal and external audit activities including audit schedules and scope
• Manage report reviews, respond to audit findings, and track remediation to closure

Requirements:

• Minimum 7 years of experience in information security compliance, GRC or IT audit roles
• Strong experience applying IT and security control frameworks (ISO 27001, SOC 1 and 2), including end-to-end control testing, remediation management, and corrective action tracking
• Familiarity with cloud security practices and the shared responsibility model
• Hands-on experience with AI Governance and compliance frameworks, such as ISO 42001
• Excellent communication and stakeholder management skills
• Strong analytical and problem-solving skills
• Certifications such as CISA, CISM, or CISSP (preferred but not required)
• Bachelor's degree or equivalent in Information Systems, Cybersecurity, Business or related field