GRC Analyst

As a GRC Analyst at Paxos, you support the development, implementation, and maintenance of governance, risk management, and compliance programs. You work with cross-functional teams including Information Security, IT, Legal, Privacy, Internal Audit, and Business Operations to identify risks, track remediation activities, assess security risks, monitor compliance with internal policies and external regulations, coordinate audits, and ensure appropriate controls protect business information and technology assets.

What you'll do

• Perform security risk assessments, control assessments, compliance and privacy reviews
• Support internal and external audits, including evidence collection, control validation, and remediation tracking
• Work with cross-functional teams to identify risks and track remediation activities
• Develop, review, and maintain security policies, standards, procedures, and compliance documentation
• Manage risk registers, control matrices, audit findings, and corrective action plans
• Conduct third-party and vendor security risk assessments and review supplier compliance documentation

What you bring

• Experience in Governance, Risk, and Compliance (GRC), information security, IT risk management, or cybersecurity compliance roles
• Hands-on experience performing security risk assessments, control assessments, compliance and privacy reviews
• Working knowledge of security frameworks and standards such as ISO 27001, NIST CSF, SOC 2, PCI DSS, GDPR, or similar regulatory requirements
• Experience supporting internal and external audits, including evidence collection, control validation, and remediation tracking
• Ability to develop, review, and maintain security policies, standards, procedures, and compliance documentation
• Experience managing risk registers, control matrices, audit findings, and corrective action plans
• Experience conducting third-party and vendor security risk assessments and reviewing supplier compliance documentation

About Paxos

Paxos is rebuilding financial infrastructure by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, the company has built blockchain infrastructure that tokenizes, custodies, trades and settles assets for leading financial institutions including Mastercard, Visa, Robinhood, and PayPal.