Sr. GRC Risk Analyst
WHO WE ARE Come join the company at the center of how the world adopts AI securely. Cyera’s mission is to give enterprises the confidence to embrace AI safely — deciding exactly what it can see and do as it reaches deeper into the business. We started by solving the hardest problem in data security: finding and securing data faster and more precisely than anyone thought possible. That foundation is now the essential AI trust infrastructure for the Fortune 1000. We’re hiring mission-driven talent to put those leaders at the center of our story. THE OPPORTUNITY We are hiring a Senior GRC Analyst- Risk to build and run Cyera's enterprise risk register. You will design the risk management framework, own the full risk lifecycle from identification to closure, and turn risk data into clear decisions for leadership. This is a builder role: you will set the foundation, then operate it at scale as Cyera grows. You will report to the GRC Manager and work closely with Security, Engineering, IT, Legal, Privacy, Finance, and business leaders. RESPONSIBILITIES: - Build the framework - Design and document Cyera's enterprise risk management methodology, including risk taxonomy, scoring model (likelihood and impact), risk appetite and tolerance thresholds, and treatment options - Align the program to recognized frameworks such as ISO 27001, NIST CSF and NIST 800-30, SOC 2, and ISO 42001 for AI risk - Establish risk ownership, RACI, escalation paths, and governance cadence with the GRC Manager and leadership - Standardize risk register structure, naming conventions, and ID nomenclature so risks are consistent and audit-ready - Operate the risk register - Own the enterprise risk register end to end: identification, assessment, treatment, monitoring, acceptance, and closure - Run recurring risk assessments and workshops with control owners and business stakeholders - Track treatment plans, remediation due dates, and risk acceptances, and follow up with owners to keep