
Senior Operational Risk and Reporting Analyst
Required skills
- operational risk
- IT risk
- GRC
- risk assessment
- reporting processes
- third party risk
- vendor tiering
- security assessments
- SOC 2
- ISO reports
Nice to have
- GRC tooling
Role summary
Groq is seeking a Senior Operational Risk and Reporting Analyst to transform GRC risk reporting into a continuous, business-impact-focused operation and to lead the third-party risk program. This role involves establishing a monthly operating rhythm for risk assessment and tracking remediation across all frameworks. The analyst will produce monthly risk reports for leadership, own the end-to-end third-party risk program including security assessments and report review, and ensure all open findings have clear ownership and disposition. The ideal candidate has 5+ years of experience in operational risk, IT risk, or GRC, with a proven track record in building and running risk assessment and reporting processes in regulated environments, and experience reporting to risk committees and executives.
Responsibilities & opportunities in this role:
- Build and run GRC risk reporting as a continuous operation: intake, scoring against the risk methodology, treatment tracking, and risk acceptance with owners and expiry dates; centralise risk data (register, KRIs, audit findings, critical vendors) into dashboards leadership can use.
- Produce the monthly risk report to security leadership, framed by business impact rather than control count, with executive-ready commentary.
- Own the third party risk program end to end: vendor tiering, security assessments on the cadence each tier requires, review of vendor SOC 2 and ISO reports, remediation tracking, and clearing the vendor assessment control in GRC tool.
- Track remediation across all frameworks so every open finding has an owner, a date and a disposition, and report aging monthly.
Ideal candidates have/are:
- 5+ years in operational risk, IT risk or GRC, including building and running risk assessment and reporting processes end to end in a regulated environment.
- Experience producing monthly risk reporting for risk committees and executives.
- Experience testing controls for effectiveness, evaluating new initiatives for risk exposure before implementation, including third party risk assessments.
- Experience with GRC tooling preferred.
Why Join Us:
- Purposeful Hiring: You’re not here by accident, and neither is anyone else. Every teammate is handpicked with intention because who we build with matters.
- Builders Wanted: You’re not just riding the rocket ship, you’re building it. Your work directly shapes the trajectory of our company.
- Mission-Driven Work: We’re here to make a real impact. Our mission fuels everything we do.
- Tackling Hard Problems: If easy isn’t your thing, you’re in the right place. We solve some of the most complex and exciting challenges in our space.
- Excellence Is The Standard: High performance isn’t just encouraged, it’s the baseline. And it’s contagious.
CompensationGroq is committed to providing competitive compensation through our Total Cash philosophy, which incorporates potential bonus value directly into base pay. The total cash salary range for this position, which is inclusive of the potential bonus value, is $127,500–$172,500, with individual placement determined by your geographic location, experience, skills, and alignment with internal compensation standards. This range is specific to candidates located in the United States. Compensation for international candidates will vary based on local market dynamics. Beyond cash compensation, Groq also offers a Long-Term Incentive (LTI) Program and a robust suite of employee benefits.
Similar roles
Audit and Compliance Program ManagerGroq · Dallas-fort Worth, IL · Hybrid
Senior Counsel, Data Center & InfrastructureGroq · Dallas-fort Worth, IL · Hybrid
SOX Compliance and Financial Reporting Analyst I, II, III or SeniorTri-State Generation and Transmission Association, Inc. · Westminster, CO · Hybrid
Performance & Reporting Analyst, Data Center InfrastructureIREN · Fort Worth, TX · Hybrid
Business Intelligence and Reporting AnalystTD · Montreal, QC · Hybrid
Airport Data/Reporting Analyst II- Regulatory ComplianceCity of Atlanta · Atlanta, GA · Hybrid
