Security Governance Analyst II

Are you ready to move beyond "check-the-box" compliance? We are looking for a Security Governance Analyst to help us bridge the gap between complex security requirements and real-world execution.
Based in our Belfast office, you will be a key player in our Governance, Risk & Compliance (GRC) team, helping Rapid7 maintain its reputation for transparency and security across the EMEA and APAC regions.
About the Team
Rapid7's GRC team operates at the intersection of technical excellence and business enablement, partnering deeply with InfoSec, Legal, and Engineering to build resilient, compliant, and transparent security posture for our customers.
About the Role
As a Security Governance Analyst, your primary responsibility will be to serve as a key practitioner executing compliance initiatives and bridging the gap between technical teams and regulatory frameworks. Specifically, your focus will be to:

• Execute GRC deliverables within SLAs, ensuring compliance programs run predictably and with high quality.
• Translate complex auditor requirements into actionable, practical steps for internal technical and engineering teams.
• Identify gaps, spot project delays, and flag risks early to pivot proactively toward effective solutions.
• Assist in evaluating the design and effectiveness of security controls to support the overall audit lifecycle.
• Advocate for security controls across the business to foster an organizational culture where security is a shared responsibility.

The skills and qualities you'll bring include:

• Bring 2+ years of experience in information security, IT audit, or a related compliance domain within cloud-first environments.
• Demonstrate foundational knowledge of security frameworks such as ISO 27001, SOC2, or NIST CSF.
• Break down complex compliance objectives into clear, time-bound milestones while executing quickly and assessing progress.
• Hold self and others responsible for driving outcomes, delivering commitments, and establishing clear project ownership.
• Communicate complex technical risks and rationale clearly to non-technical stakeholders to build alignment.
• Build global cross-functional partnerships across legal, engineering, and security teams to deliver sustainable business value.
• Apply strong self-awareness to adapt to group dynamics, seek feedback, and learn continuously from challenges.
• Embody our core values to foster a culture of excellence that drives meaningful impact and collective success.

We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
#LI-PB1
About Rapid7
At Rapid7, our vision is to create a secure digital world for our customers, our industry, and our communities. We do this by harnessing our collective expertise and passion to challenge what's possible and drive extraordinary impact. We're building a dynamic and collaborative workplace where new ideas are welcome.
Protecting 11,500+ customers against bad actors and threats means we're continuing to push the envelope just like we' ve been doing for the past 20 years. If you 're ready to solve some of the toughest challenges in cybersecurity, we're ready to help you take command of your career. Join us.