Job Description:Senior GRC Analyst Department: Information Security / Risk &amp; Compliance We’re looking for a Senior Governance, Risk, and Compliance (GRC) Analyst to strengthen our risk management and compliance programs. In this role, you’ll partner with IT, security, legal, and business leaders to ensure regulatory compliance, reduce risks, and enhance governance practices across the organization. What You’ll Do <ul><li style="text-align:left;">Lead risk assessments and manage third-party/vendor risk. </li></ul><ul><li style="text-align:left;">Maintain compliance with frameworks (ISO 27001, NIST, SOC 2, GDPR). </li></ul><ul><li style="text-align:left;">Support internal and external audits (SOC 2, ISO 27001, etc....). </li></ul><ul><li style="text-align:left;">Develop and update security policies, standards, and procedures. </li></ul><ul><li style="text-align:left;">Provide compliance training and promote a culture of risk awareness. </li></ul><ul><li style="text-align:left;">Build reports/dashboards to communicate compliance and risk status to leadership. </li></ul>Governance &amp; Policy Development <ul><li style="text-align:left;">Develop, update, and maintain security and compliance policies, standards, and procedures. </li></ul><ul><li style="text-align:left;">Ensure alignment with industry frameworks such as ISO 27001, NIST CSF, SOC 2, HIPAA, PCI-DSS, and GDPR. </li></ul><ul><li style="text-align:left;">Educate business units on compliance requirements and governance standards. </li></ul>Risk Management <ul><li style="text-align:left;">Lead enterprise and IT risk assessments, identifying, evaluating, and prioritizing risks. </li></ul><ul><li style="text-align:left;">Recommend and track remediation plans to address control gaps and vulnerabilities. </li></ul><ul><li style="text-align:left;">Manage third-party/vendor risk assessments and ongoing due diligence. </li></ul>Compliance &amp; Audit Readiness <ul><li style="text-align:left;">Support internal and external audits (e.g., SOC 2, SOX, PCI-DSS). </li></ul><ul><li style="text-align:left;">Maintain compliance evidence repositories and audit documentation. </li></ul><ul><li style="text-align:left;">Monitor changes in regulations and industry standards to ensure ongoing compliance. </li></ul>Security Awareness &amp; Training <ul><li style="text-align:left;">Contribute to compliance training and awareness programs for employees. </li></ul><ul><li style="text-align:left;">Promote a culture of compliance and risk awareness across the organization. </li></ul>Metrics &amp; Reporting <ul><li style="text-align:left;">Develop dashboards and reports that communicate risk and compliance status to leadership. </li></ul><ul><li style="text-align:left;">Provide recommendations for improving governance and compliance maturity. </li></ul>What We’re Looking For <ul><li style="text-align:left;">5–7+ years in GRC, risk management, or compliance (with senior/lead experience). </li></ul><ul><li style="text-align:left;">Strong knowledge of regulatory frameworks and risk methodologies. </li></ul><ul><li style="text-align:left;">Experience with GRC tools such as Vanta, Drata, etc.... </li></ul><ul><li style="text-align:left;">Proven ability to work collaboratively, resolve challenges strategically, and communicate complex ideas with clarity in both written and spoken formats. </li></ul><ul><li style="text-align:left;">Certifications such as CGRC, CISSP, CISM, CRISC, or CISA are a plus. </li></ul>Why Join Us <ul><li style="text-align:left;">Shape and grow our GRC program. </li></ul><ul><li style="text-align:left;">Work with leadership on high-impact initiatives. </li></ul><ul><li style="text-align:left;">Competitive salary, benefits, and professional growth opportunities. </li></ul> At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.<h1>We are Nextpower</h1>

<div class="org-about-module__description">
<div id="ember56" class="ember-view organization-about-module__content-consistant-cards-description">Since day one, Nextracker&rsquo;s mission has been to transition the world to affordable, renewable power, by developing the highest-performing and resilient solar tracking technologies and software in the market for our customers. From sustainable tracker solutions that conform to uneven terrain and withstand extreme weather, Nextracker systems have resilience built in. Nextracker leads the solar industry with solar tracker technologies that optimize and increase energy production while reducing costs for significant plant ROI.</div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Senior GRC Analyst

Job Description:Senior GRC Analyst&nbsp;Department: Information Security / Risk &amp; Compliance&nbsp;We’re looking for a Senior Governance, Risk, and Compliance (GRC) Analyst to strengthen our risk management and compliance programs. In this role, you’ll partner with IT, security, legal, and business leaders to ensure regulatory compliance, reduce risks, and enhance governance practices across the organization.&nbsp;What You’ll Do&nbsp;<ul><li>Lead risk assessments and manage third-party/vendor risk.&nbsp;</li></ul><ul><li>Maintain compliance with frameworks (ISO 27001, NIST, SOC 2, GDPR).&nbsp;</li></ul><ul><li>Support internal and external audits (SOC 2, ISO 27001, etc....).&nbsp;</li></ul><ul><li>Develop and update security policies, standards, and procedures.&nbsp;</li></ul><ul><li>Provide compliance training and promote a culture of risk awareness.&nbsp;</li></ul><ul><li>Build reports/dashboards to communicate compliance and risk status to leadership.&nbsp;</li></ul>Governance &amp; Policy Development&nbsp;<ul><li>Develop, update, and maintain security and compliance policies, standards, and procedures.&nbsp;</li></ul><ul><li>Ensure alignment with industry frameworks such as ISO 27001, NIST CSF, SOC 2, HIPAA, PCI-DSS, and GDPR.&nbsp;</li></ul><ul><li>Educate business units on compliance requirements and governance standards.&nbsp;</li></ul>Risk Management&nbsp;<ul><li>Lead enterprise and IT risk assessments, identifying, evaluating, and prioritizing risks.&nbsp;</li></ul><ul><li>Recommend and track remediation plans to address control gaps and vulnerabilities.&nbsp;</li></ul><ul><li>Manage third-party/vendor risk assessments and ongoing due diligence.&nbsp;</li></ul>Compliance &amp; Audit Readiness&nbsp;<ul><li>Support internal and external audits (e.g., SOC 2, SOX, PCI-DSS).&nbsp;</li></ul><ul><li>Maintain compliance evidence repositories and audit documentation.&nbsp;</li></ul><ul><li>Monitor changes in regulations and industry standards to ensure ongoing compliance.&nbsp;</li></ul>Security Awareness &amp; Training&nbsp;<ul><li>Contribute to compliance training and awareness programs for employees.&nbsp;</li></ul><ul><li>Promote a culture of compliance and risk awareness across the organization.&nbsp;</li></ul>Metrics &amp; Reporting&nbsp;<ul><li>Develop dashboards and reports that communicate risk and compliance status to leadership.&nbsp;</li></ul><ul><li>Provide recommendations for improving governance and compliance maturity.&nbsp;</li></ul>What We’re Looking For&nbsp;<ul><li>5–7+ years in GRC, risk management, or compliance (with senior/lead experience).&nbsp;</li></ul><ul><li>Strong knowledge of regulatory frameworks and risk methodologies.&nbsp;</li></ul><ul><li>Experience with GRC tools such as Vanta, Drata, etc....&nbsp;</li></ul><ul><li>Proven ability to work collaboratively, resolve challenges strategically, and communicate complex ideas with clarity in both written and spoken formats.&nbsp;</li></ul><ul><li>Certifications such as CGRC, CISSP, CISM, CRISC, or CISA are a plus.&nbsp;</li></ul>Why Join Us&nbsp;<ul><li>Shape and grow our GRC program.&nbsp;</li></ul><ul><li>Work with leadership on high-impact initiatives.&nbsp;</li></ul><ul><li>Competitive salary, benefits, and professional growth opportunities.&nbsp;</li></ul>&nbsp;At Nextpower, we are driving the global energy transition with an integrated clean energy technology platform that combines intelligent structural, electrical, and digital solutions for utility-scale power plants. Our comprehensive portfolio enables faster project delivery, higher performance, and greater reliability, helping our customers capture the full value of solar power. Our talented worldwide teams are redefining how solar power plants are designed, built, and operated every day with smart technology, data-driven insights, and advanced automation. Together, we’re building the foundation for the world’s next generation of clean energy infrastructure.<h1>We are Nextpower</h1>

Senior GRC Analyst

About the Job

About the Company

Nextracker Solar

Similar Jobs

Senior GRC Analyst

Senior GRC Analyst

Senior Risk Manager - Technology & Parameta Solutions

Senior Risk Manager - Technology & Parameta Solutions

Cyber Risk, Standards & Governance Lead

Cyber Risk, Standards & Governance Lead

Information Security Analyst

Information Security Analyst

Senior Security Analyst (F/M/D)

Senior Security Analyst (F/M/D)

Information Security Analyst

Information Security Analyst

Compliance Manager (f/m/d)

Compliance Manager (f/m/d)

Senior Manager, Governance, Risk & Compliance

Senior Manager, Governance, Risk & Compliance

Risk & Regulatory Compliance Officer

Risk & Regulatory Compliance Officer

Director of Technology - Governance, Risk, and Compliance

Director of Technology - Governance, Risk, and ComplianceNew