Senior GRC & Cyber Risk Data Analyst – Remote (Part‑/Full‑Time) – $80,000 / Year – arenaflex
About arenaflex – Shaping the Future of Digital Entertainment & Security
arenaflex is a global leader in creating magical experiences through cutting‑edge entertainment, media, and technology. With a legacy of storytelling that spans generations, arenaflex continuously invests in innovative platforms, immersive experiences, and robust digital ecosystems. As the company expands its online presence, safeguarding data, ensuring compliance, and managing cyber risk have become mission‑critical. Join a team where creativity meets rigorous governance, and help protect the wonder that millions of fans worldwide enjoy every day.
Role Overview
We are seeking an experienced Governance, Risk, and Compliance (GRC) professional to serve as a Data Analyst focused on cyber risk and compliance activities. This remote position (part‑time or full‑time) offers the flexibility to work from anywhere while collaborating with arenaflex’s global security team. You will be the linchpin that connects risk‑assessment processes, third‑party risk management, and compliance reporting, ensuring that arenaflex’s digital assets remain secure, compliant, and resilient.
Key Responsibilities
- Third‑Party Risk Management (TPRM) Coordination: Administer arenaflex’s TPRM platform, validate incoming risk assessment requests, and work closely with business stakeholders to define scope and deliverables.
- Due Diligence Questionnaire Management: Distribute, collect, and review third‑party questionnaires; assess completeness, identify gaps, and recommend remediation actions.
- Risk Findings Documentation: Record risk findings, remediation plans, and status updates in arenaflex’s risk management system, ensuring traceability and auditability.
- Compliance Reporting: Draft and review risk assessment reports, collaborate with internal and external auditors, and ensure that senior leadership receives clear, actionable insights.
- Continuous Monitoring: Track open risk items, monitor remediation progress, and close findings in a timely manner while escalating critical issues as needed.
- Process Improvement: Identify opportunities to streamline TPRM workflows, propose enhancements to arenaflex’s risk management tools, and partner with the risk lead to implement best‑practice solutions.
- Regulatory & Standards Alignment: Maintain up‑to‑date knowledge of ISO 27001, SOC 2, SSAE 18, and other relevant frameworks; ensure arenaflex’s policies reflect the latest regulatory changes.
- Stakeholder Communication: Serve as a trusted liaison between the security team, business units, and external partners, delivering clear explanations of risk concepts and compliance requirements.
- Education & Awareness: Contribute to the development of compliance training materials and internal communications that promote a culture of security awareness across arenaflex.
Essential Qualifications
- Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field, or equivalent professional experience.
- Minimum 4 years of hands‑on experience in third‑party risk management, information security, audit, or compliance functions.
- Demonstrated expertise with GRC tools and platforms (e.g., ServiceNow GRC, RSA Archer, or similar).
- Strong understanding of ISO 27001, SOC 2, SSAE 18, and related compliance frameworks.
- Proven ability to analyze qualitative and quantitative risk data, produce clear documentation, and drive remediation activities.
- Excellent written and verbal communication skills, with the ability to translate technical concepts for non‑technical audiences.
- Highly organized, detail‑oriented, and capable of managing multiple priorities in a fast‑paced environment.
Preferred Qualifications & Certifications
- Professional certifications such as CISA, CRISC, CISSP, ISO 27001 Lead Implementer, or equivalent.
- Experience working within a large, multinational corporation or a major professional services firm.
- Familiarity with AI/ML concepts as they relate to security analytics and risk scoring.
- Exposure to cloud security frameworks (e.g., AWS Well‑Architected, Azure Security Benchmark).
- Prior involvement in cross‑functional projects that required coordination between legal, procurement, and IT security teams.
Core Skills & Competencies
- Analytical Thinking: Ability to dissect complex risk scenarios, identify root causes, and recommend practical solutions.
- Stakeholder Management: Proven track record of building strong relationships with internal business units, external vendors, and senior leadership.
- Presentation Skills: Comfortable delivering risk findings and compliance updates to diverse audiences, from technical teams to executive boards.
- Project Management: Experience planning, scheduling, and executing risk‑related initiatives on time and within scope.
- Adaptability: Thrive in a dynamic environment, quickly adjusting to evolving regulatory landscapes and business priorities.
- Ethical Judgment: Commitment to maintaining confidentiality, integrity, and professionalism in all risk‑related activities.
Career Growth & Learning Opportunities
arenaflex invests heavily in the development of its talent. As a GRC Data Analyst, you will have access to:
- Mentorship from senior security leaders and industry‑recognized experts.
- Sponsored certifications and continuous education programs.
- Opportunities to work on high‑visibility projects that influence global security strategy.
- Cross‑functional rotations that broaden your understanding of privacy, legal, and product development.
- A clear career path toward senior GRC manager, risk architect, or security compliance director roles.
Work Environment & Culture at arenaflex
Our remote‑first philosophy empowers you to design a work‑life balance that suits your needs. arenaflex fosters an inclusive, collaborative culture where creativity and security go hand‑in‑hand. Highlights include:
- Flexible working hours and a results‑oriented performance model.
- Regular virtual team‑building events, knowledge‑sharing sessions, and “magic‑moments” celebrations.
- Diverse, global teams that bring together perspectives from entertainment, technology, and finance.
- A commitment to mental‑wellness, with resources such as counseling services, mindfulness apps, and wellness stipends.
- Employee resource groups (ERGs) that support under‑represented communities and promote a sense of belonging.
Compensation, Perks & Benefits
arenaflex offers a competitive total rewards package, including:
- Base salary of $80,000 per year (adjusted for part‑time or full‑time commitment).
- Performance‑based bonuses tied to risk‑mitigation milestones.
- Comprehensive health, dental, and vision coverage.
- Retirement savings plan with company matching contributions.
- Generous paid time off, parental leave, and holiday schedules.
- Technology stipend for home office setup, high‑speed internet, and ergonomic equipment.
- Access to a digital learning platform, industry conferences, and internal training workshops.
Application Process
Ready to protect the magic? Follow these steps to apply:
- Prepare an updated resume highlighting your GRC, risk‑management, and compliance experience.
- Write a concise cover letter that explains why arenaflex’s mission resonates with you and how your background aligns with the responsibilities outlined above.
- Submit your application through the online portal. Our recruiting team will review your submission and contact you within 7‑10 business days.
- Successful candidates will complete a virtual interview series, including a technical assessment, a behavioral interview, and a meeting with the GRC leadership team.
- Upon selection, you will receive an offer package, onboarding schedule, and a welcome kit to set you up for success.
Why Join arenaflex?
At arenaflex, you will be part of a world‑class organization that blends imagination with rigorous security practices. Your work will directly influence how millions of fans experience beloved stories safely across digital platforms. If you are passionate about risk management, thrive in a collaborative remote environment, and want to make a tangible impact on a globally recognized brand, we want to hear from you.
Take the Next Step
Don’t miss the chance to shape the future of entertainment security. Apply today and become a guardian of the magic that defines arenaflex.
Apply for this job