Senior Security Risk & Compliance Analyst

Job overview

The Senior Security Risk & Compliance Analyst role is onsite in Westerville, OH; compensation is not specified. APCO Holdings provides vehicle protection products and services to dealerships and supports their finance and insurance performance. The analyst strengthens security governance, risk, and compliance by coordinating audits, assessing controls, maintaining risk records, and tracking remediation. The role helps protect systems and data while supporting regulatory and customer compliance commitments across business and technology teams.

What you'll do

• Coordinate compliance audits and readiness
• document controls and validate evidence
• track findings and remediation
• perform internal audits and control assessments
• administer the GRC platform
• maintain the enterprise risk register
• facilitate risk assessments
• report risk posture
• collaborate on security policies and compliance initiatives.

What we're looking for

Skills & competencies

senior security risk & compliance analyst

apco holdings

westerville oh

full-time

security grc

soc 2

internal audit

risk management

grc platform

nist

compliance controls

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision benefits, 401(k) with company match, paid time off, company holidays, professional growth, and certification support.

Why this role

Requires at least five years of security compliance, audit, or GRC experience and hands-on SOC 2 audit experience. CISA, CRISC, or CISSP certifications are preferred.

About the employer

APCO Holdings is hiring for this role. Industry: Direct Health and Medical Insurance Carriers. Sector: 52.