Sr Risk Analyst

About Crunchyroll

Founded by fans, Crunchyroll delivers the art and culture of anime to a passionate community. We super-serve over 100 million anime and manga fans across 200+ countries and territories, and help them connect with the stories and characters they crave. Whether that experience is online or in-person, streaming video, theatrical, games, merchandise, events and more, it’s powered by the anime content we all love.

Join our team, and help us shape the future of anime!

Who We Are

We're a cast of characters working to shine a spotlight on anime. Crunchyroll is an international business focused on creating both online and offline experiences for fans through content (licensed, co-produced, originals, distribution), merchandise, events, gaming, news, and more. Visit our About Us pages for more information about our collection of brands.

About The Role

Our team is looking for someone with the passion and skills to support the evolution of our corporate Information Security GRC team. A specific focus will be on defining processes and implementing technology to support a comprehensive enterprise security program, including governance, risk, and compliance  (GRC). This role will be responsible for ensuring we are designing and evolving technologies in consideration of employee needs, supporting long-range strategy, cross-functional projects, and initiatives across Crunchyroll globally. This role will require a strong partnership across Crunchyroll’s teams, including Legal, Engineering, IT, People, Workplace Experience, Trust & Safety, as well as third party contractors, and suppliers.

If you have 80% of the requirements below, apply now!

About You:

• You have 8+ years supporting GRC programs in Information Security or Information Technology
• You have experiencing leading PCI, SOX, and Audit (internal and external) assessments
• You have experiencing supporting council and oversight committees
• You have experience with cloud based platforms such as GCP and AWS
• You have experience with IAM best practices and administration
• You have a strong fundamental understanding of security best practices and frameworks such as PCI, NIST, and ISO
• You have experience with control testing and evidence validation
• You have experience performing risk assessments
• You have experience with vendor assessments and management
• You have experience working with and optimizing GRC tools
• You have the ability to learn new technologies and concepts quickly and apply that knowledge effectively
• You have working knowledge of AI technologies
• You have the ability to navigate complex organizations
• You are data driven and have a strong attention to detail
• You have the ability to communicate complex issues to a wide audience, from technical staff to m