Technical GRC Analyst (Compliance & Assurance)
As part of the Tessera Lab Compliance & Assurance team, you'll help build and maintain trust by partnering across the business to provide practical, risk-based compliance and assurance that enables the company to scale with confidence.
As a Technical GRC Analyst, you'll partner with Security, Engineering, Product, and business teams to evaluate technical controls, validate evidence, assess risk, and continuously improve the organization's compliance and assurance program.
This is a hands-on role for someone who enjoys understanding how technology works, asking thoughtful questions, solving problems, and helping build a modern compliance program that scales with the business.
Your Focus Areas
Technical Control Assurance and Risk Assessments
AI Governance & Emerging Technologies (ISO 42001)
Technical Customer Assurance
Program Intelligence, Metrics & Analytics
Compliance Automation & Continuous Improvement
Key Responsibilities
Evaluate the design and operating effectiveness of technical controls.
Review and validate evidence to assess whether controls are implemented, operating effectively, and appropriately documented.
Perform technical risk assessments for new technologies, systems, and business initiatives.
Partner with Engineering and Security to ensure technical controls align with compliance requirements and industry best practices.
Support and continuously improve the company’s AI governance program — AI policies, acceptable-use standards, risk assessments, vendor evaluations, and security controls aligned with ISO 42001.
Transform compliance data into meaningful insights that support business decisions and program maturity.
Identify opportunities to automate compliance activities and improve operational efficiency.
Support internal assessments, customer due diligence, and external audits.
What You'll Bring
Experience
8+ years of experience in technical security, Security GRC, regulatory compliance, or a related discipline.
Experience evaluating technical controls and validating supporting evidence.
Experience performing technical risk assessments and working with cross-functional teams.
Experience working in technology organizations with modern cloud and enterprise environments.
Exposure to FedRAMP authorization activities including NIST 800-53 control implementation, SSP development, evidence collection, POA&M management, or readiness assessments is highly desirable.
Working knowledge in several of the following areas:
Cloud and security architecture concepts
Vulnerability and risk management
Secure software development and DevSecOps concepts
Data protection and encryption
AI governance and emerging technologies
Dashboard development, reporting,analytics and automation
You're someone who:
Enjoys understanding how technology works and asking thoughtful questions.
Can translate technical concepts into practical compliance conversations
Exercise sound judgment when evaluating controls, validating evidence, and balancing compliance requirements with practical business needs.
Builds trusted relationships across teams.
Takes ownership and enjoys improving processes.
Thrives in a fast-paced startup environment.
What Success Looks Like
Technical controls are consistently evaluated and continuously improved.
Leadership has meaningful visibility into technical risks and control effectiveness.
Dashboards and metrics support informed business decisions.
Customer and audit activities are well supported through high-quality evidence and strong technical assurance.
Skills Required
- 8+ years of experience in technical security, Security GRC, regulatory compliance, or a related discipline
- Experience evaluating technical controls and validating supporting evidence
- Experience performing technical risk assessments and working with cross-functional teams
- Experience working in technology organizations with modern cloud and enterprise environments
- Working knowledge of cloud and security architecture concepts
- Working knowledge of vulnerability and risk management
- Working knowledge of secure software development and DevSecOps concepts
- Working knowledge of data protection and encryption
- Working knowledge of AI governance and emerging technologies
- Working knowledge of dashboard development, reporting, analytics, and automation
- Exposure to FedRAMP authorization activities, including NIST 800-53 control implementation, SSP development, evidence collection, POA&M management, or readiness assessments
What We Do
Enterprise transformations shouldn't take years or cost fortunes. At Tessera, we've built a multi-agent AI platform that cuts ERP transformation timelines from years to weeks and reduces costs by more than half—while delivering first-time-right outcomes with enterprise-grade security and governance. We combine the dependability of a trusted integrator with the speed of an AI innovator. Our vendor-agnostic platform is pre-trained on thousands of enterprise landscapes and hundreds of years of expertise, so it adapts to your environment from day one—harmonizing systems and data to deliver secure, governed execution across ERP and other critical systems. Unlike traditional system integrators, ERP vendor tools, AI point solutions, or in-house builds, Tessera delivers transformations that compress timelines by 90%, replace people-heavy manual work with intelligent automation, ensure systems and data harmonize correctly from the start, and avoid vendor lock-in through adaptive intelligence that evolves with your workflows. Tessera creates lasting change in how your processes and systems operate together. As the platform adapts to your environment and evolves with new data, you gain the confidence to modernize with less risk—freeing up resources to reinvest in growth rather than maintaining legacy complexity. Proven in regulated industries. Built for enterprise reality. Reshaping how organizations transform.
