GRC Analyst

About Delinea:
Delinea is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. Delinea provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and ephemeral access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

Delinea’s Cybersecurity organization is seeking a skilled GRC Analyst to play a key role in managing its cybersecurity risk management framework and third-party risk program. This role ensures Delinea’s alignment and adherence with policies, practices, and applicable standards, while enabling the business to make well-informed, risk-based decisions.

This role requires the ability to work cross-functionally with IT, Product Engineering, Legal, Privacy, Procurement, and business stakeholders to deliver on company commitments and objectives.

This is a hybrid role based in Mexico City, Mexico, and reports to the Lead Analyst of Governance, Risk, and Compliance.

What you´ll do

· Assess cybersecurity risk and maturity and turn results into clear, prioritized risk statements.

· Maintain the cybersecurity risk register in Delinea’s GRC solution, including ratings, owners, treatment plans, and remediation progress through closure; coordinate remediation with risk owners and approvers.

· Monitor and report key risk indicators and escalate risks above defined appetite or tolerance.

· Work with the Assurance Team to verify business objectives are met and controls are implemented and effective, using evidence and other validation methods.

· Assess vendor security risks and control effectiveness using questionnaires, SOC reports, penetration test summaries, and other evidence.

· Document vendor findings, risks, and remediation needs; track resolution with internal business owners and coordinate review dependencies with Business Owners, Procurement, IT, Privacy, and Legal.

· Maintain vendor risk documentation, inventories, and procedures and help improve the vendor risk management program.

· Manage cybersecurity issue intake process from self-reporting, risk and control assessments, and audits: log, triage, and prioritize issues with assigned owners, remediation plans, and target dates.

· Monitor issues register and overdue remediation through closure, escalate as needed, and report open issues, policy exceptions, and risk acceptances to management and leadership track validation in Delinea’s GRC solution.

· Manage policy exceptions register and risk acceptances: handle intake, analysis, and compensating control review; route approvals to appropriate leaders, track expirations and extension requests.

· Analyze issue and exception trends to identify recurring control gaps, policy improvements, and ways to strengthen controls.

What you´ll need

· Bachelor’s degree in Computer Science, Information Technology, Business Administration, or a related field.

· 3+ years of relevant work experience.

· Solid understanding and ability to implement dependable, repeatable, and auditable data protection, privacy, and security controls in accordance with leading compliance standards (e.g., ISO27xxx, SOC 1, SOC2, PCI-DSS, FedRAMP, Common Criteria).

· Practical experience in performing security risk assessments including vendor security reviews.

· Strong time management, organizational skills, and diligence.

· Strong verbal and written communication, analytical and people skills.

· Fluent in English (spoken and written)

We'd Love to See:

· Cybersecurity certifications (e.g. CISSP, CISA, CRISC, CIPP, etc.).

· Familiarity with OneTrust or other GRC tools.

· Familiarity with Jira, SharePoint and Confluence

Why work at Delinea?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.

• We invest in people who are smart, self-motivated, and collaborative.

• What we offer in return is meaningful work, a culture of innovation and great career progression.

At Delinea, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do

• Trust - We act with integrity and deliver on our commitments

• Respect - We listen, value different perspectives, and work as one team

• Ownership - We take initiative and follow through

• Nimble - We adapt quickly in a fast-changing environment

• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

Delinea is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.