• Carrying out assigned audit and monitoring programs • Compliance data reporting and analytics • Risk management programs • Oversight for key risk remediation • Compliance program and policies management • Investigations for all areas of operation • Serve as subject matter expert to advise business • Execute training program strategy and support of business stakeholders

• The Senior GRC Analyst acts as a strategic lead to advance security and risk operations • Integrate people, policy, and technology to drive operational excellence and framework maturity • Identify security gaps, implement best practices, and mature the control environment to ensure we stay ahead of evolving regulatory and threat landscapes • Build an AI-first compliance function • Lead from the front in identifying and deploying AI tools that scale the GRC program

• Facilitate compliance program that enables innovation while ensuring legal adherence • Support business growth with monitoring of regulatory developments • Collaborate with internal stakeholders to develop compliant solutions • Maintain procedures and documentation for regulated activities • Review and negotiate contracts for regulatory compliance

• Serve as the primary compliance and governance contact for assigned MSP and MSSP clients. • Guide clients through compliance readiness efforts, including planning, documentation, policy development, evidence preparation, and auditor-facing coordination. • Own the onboarding and ongoing service experience for compliance-focused MSSP clients. • Prepare and deliver compliance-focused security QBRs, cadence calls, and client status updates. • Write, update, and maintain Written Information Security Programs, security policies, governance documentation, and related client-facing materials. • Help scope, coordinate, and manage compliance and security projects to ensure work is scheduled, communicated, and delivered on time. • Support Microsoft Purview, data governance, sensitivity labeling, and Bronze/Silver/Gold data classification initiatives for Endsight and its clients. • Advise internal leaders on compliance, governance, data protection, and risk management needs. • Coordinate with security analysts, Client Strategy Managers (CSMs), consultants, leadership, and client stakeholders to keep compliance work moving. • Participate in customized cybersecurity awareness training efforts for clients. • Support the security team's shared SOC alert and on-call process by assisting with initial triage and communication when needed. This is not a hands-on technical support role.