← All roles

GRC Security Analyst

Clear Capital· Administration – Enterprise Information Security
Apply on company site
Hybrid (Reno, NV)$114k - $139kFull-timePosted 3w ago

About the role

GRC Security Analyst responsible for ensuring adherence to security standards, regulations, and policies within the regulated mortgage lending and appraisal industry. Leads risk assessments, policies, audits, and remediation efforts, and communicates with internal/external partners to maintain and improve the organization’s GRC posture.

Responsibilities

  • Monitoring and enforcing compliance with critical security frameworks (NIST CSF, NIST RMF, ISO 27001/27002, SOC 2, ISO 42001) and regulations (GLBA, CCPA, GDPR) relevant to financial services and real estate valuation.
  • Conducting comprehensive risk assessments to identify vulnerabilities, evaluate controls, and resolve issues.
  • Developing, maintaining, and adapting security policies, procedures, and guidelines.
  • Leading preparation and participation for internal and external security audits and addressing audit findings.
  • Enhancing cross-functional collaboration to implement remediation plans for security gaps.
  • Evaluating third-party vendor security posture and contractual compliance.
  • Maintaining records of compliance activities, findings, and remediation; creating reports for management, clients, and regulators.
  • Defining qualitative and quantitative metrics to assess the security program and reporting to leadership.
  • Staying informed about emerging threats, technologies, and regulatory changes in financial/real estate tech.
  • Other duties as assigned.

Qualifications

  • Minimum of 5 years in GRC, security compliance, or risk management with a Bachelor’s degree; or 3 years with a Master’s degree; or equivalent.
  • Complete knowledge of security frameworks and data privacy regulations (NIST CSF, SOC 2, ISO 27001, ISO 42001; GLBA, GDPR, CCPA).
  • Certifications: CISSP, CISM, CISA, CRISC, AIGP, or equivalent.
  • Strong analytical and problem-solving abilities; independent, nuanced judgment.
  • Excellent communication and influencing skills with senior stakeholders.
  • Familiarity with GRC tools (e.g., Vanta, Drata, OneTrust) and risk assessment practices specific to financial services/real estate.
  • Detail-oriented with thorough documentation, reporting, and policy formulation.
  • Commitment to confidentiality, integrity, and professionalism.
  • Ability to understand legacy and modern technologies; working knowledge of cloud, DevOps, and application security.
  • Advanced spreadsheet skills for data analysis, audit metrics, and complex reporting.

Skills

Required:Security frameworks and standardsAudit managementVendor risk assessmentPolicy developmentAnalytics and reporting

Benefits

  • Comprehensive medical, dental, and company-paid vision insurance
  • 401(k) with employer match
  • Voluntary life and AD&D, voluntary insurances for accident, critical illness, and legal services
  • Paid time off and paid holidays
  • Employee assistance and wellness programs
  • Company-paid short-term disability
  • Health savings account contributions with high-deductible health plan participation
  • Access to Galileo for virtual primary care and Rula for virtual mental health resources
  • Anniversary program rewards and recognition
  • Career and skill development resources
  • Mission-driven environment
Last updated Oct 23, 2026. Interested? Apply on the company site.

About Clear Capital

Clear Capital is a real estate valuation technology company offering valuation services, data and analytics tools, and more.

real estatevaluationdataanalyticsplatform technology
Company profileWebsite

More open roles at Clear Capital