Associate GRC Security Analyst

Responsibilities

• Support internal and external audits by gathering, organizing, and maintaining evidence in a timely and accurate manner
• Support the operation, implementation, and administration of the team's GRC platform, including compliance documentation management and reviews, attestations, workflow configuration, user management, and data integrity maintenance
• Perform vendor risk assessments to evaluate third-party security posture and compliance alignment
• Conduct risk assessments and contribute to maintaining the organization's risk register and open findings tracking
• Support security awareness training programs including content coordination, participation tracking, and reporting
• Assist with planning, execution, and results reporting for phishing simulation campaigns
• Map and cross-reference controls across multiple compliance frameworks such as SOC2, PCI-DSS, GovRAMP, and NIST
• Maintain audit-ready documentation, policy version control, and evidence repositories year-round
• Track and manage security exceptions through their full lifecycle including intake, approval, and expiration
• Assist identifying, building and reporting on GRC-specific metrics for leadership
• Cross-train with and support other members of the security team as needed

Requirements

• Bachelor's degree, preferably in Computer Science, Cybersecurity, Information Systems, or a related field
• 1-3 years of experience in GRC, IT audit, compliance, risk management, or a related field
• Familiarity with common compliance frameworks such as SOC2, PCI-DSS, NIST, ISO 27001, or GovRAMP
• Previously supported audits pertaining to SOC2 Type 2 and/or PCI-DSS (Level 1 or hands-on SAQs)
• Experience with or exposure to vendor risk assessment processes and third-party risk management
• Strong attention to detail with the ability to organize and manage documentation and evidence across multiple workstreams
• Excellent written and verbal communication skills with the ability to work across technical and non-technical teams
• Comfort working in a fast-paced environment and managing multiple priorities simultaneously
• Relevant certifications such as CompTIA Security+, CISA, or GRCP are a plus
• Familiarity with GRC platforms like Vanta or Auditboard, or ticketing tools such as Jira is a plus
• ABOUT IXL LEARNING
• IXL Learning is the country's largest EdTech company. We reach millions of learners through our diverse range of products. For example:
• 1 in 4 students in the United States uses IXL.com
• Rosetta Stone provides an immersive learning experience for 25 languages
• Wyzant is the nation's largest community of tutors, covering 300+ subjects
• Teachers Pay Teachers (TPT) is a comprehensive marketplace for millions of educator-created resources

Additional Information

IXL Learning, developer of personalized learning products used by millions of people globally, is seeking an Associate GRC Analyst to join our growing security team. In this role you will support IXL's internal cybersecurity governance, compliance, and audit program by gathering evidence, performing vendor risk assessments, conducting risk assessments, and maintaining audit-ready documentation. You will also contribute to security awareness training and phishing simulation programs and cross-train with and support other members of the security team. This role is a great fit for someone early in their GRC career who is eager to build hands-on experience across multiple compliance frameworks and risk management disciplines. This position requires you to be in our San Mateo, CA, headquarters office.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at ixllearning? Share your experience