Senior Security Risk and Compliance Analyst

Job overview

The Senior Security Risk and Compliance Analyst role is onsite in Ponte Vedra, FL. Compensation is not specified. The position supports APCO Holdings’ security governance, risk, and compliance initiatives as the company provides vehicle protection products and services to dealerships. The analyst evaluates security controls, coordinates audits, and tracks findings and remediation to strengthen the organization’s security posture and regulatory compliance. The role also maintains risk records and GRC platform information and collaborates with IT, Security, Legal, and business teams.

What you'll do

• Support compliance audit planning and execution
• document and maintain controls
• collect and validate audit evidence
• track findings and remediation
• perform internal audits and control assessments
• develop audit plans, testing procedures, and reports
• administer the GRC platform
• maintain the enterprise risk register
• facilitate risk assessments
• report risk posture
• assist with security policies and compliance initiatives.

What we're looking for

Skills & competencies

senior security risk analyst

ponte vedra fl

security grc

compliance audits

soc 2

internal audit

risk register

control testing

servicenow grc

archer grc

nist

apco holdings

Work arrangement

• Weekend coverage required

Benefits & perks

• Medical, dental, and vision benefits
• 401(k) with company match
• paid time off and company holidays
• professional growth and certification support.

Why this role

At least five years of security compliance, audit, or GRC experience; hands-on SOC 2 audit experience and familiarity with frameworks such as ISO 27001 and NIST. CISA, CRISC, or CISSP certifications are preferred.

About the employer

APCO Holdings is hiring for this role. Industry: Insurance Agencies and Brokerages. Sector: 52.