Senior Staff Analyst, GRC

📋 Description

• • The Senior Staff Analyst, GRC role at Mozilla Corporation is a critical position within the Security Function of the Mozilla Infrastructure team, responsible for defining, developing, and implementing a comprehensive Governance, Risk, and Compliance (GRC) framework across both Enterprise and Product verticals to align security, privacy, regulatory, and risk management initiatives with the organization’s mission.
• • Day-to-day responsibilities include developing and maintaining a GRC strategy and roadmap, leading the creation and enforcement of standards, policies, controls, audits, and reporting; operationalizing risk assessment and management frameworks with measurable scorecards for data-driven decisions; ensuring compliance with ISO, NIST, SOC2, CCPA, GDPR, and other regulatory standards; leading internal and external audit activities; partnering with Legal, IT, Finance, and Security teams to integrate GRC efforts; and defining data lifecycle management requirements and reporting in collaboration with data platform and legal teams.
• • Mozilla Corporation is a mission-driven, non-profit-backed technology company wholly owned by the Mozilla Foundation, dedicated to making the internet better for people through open-source software like Firefox, prioritizing user privacy and security over profit, and supported by a global community of volunteers and contributors.
• • In this role, the individual will develop deep expertise in enterprise-wide GRC integration, influence cross-functional change at a global scale, shape organizational risk culture, and gain leadership experience in aligning security, privacy, and compliance with business objectives while working on impactful technology that serves over 225 million monthly users worldwide.