--- title: 'Senior Governance, Risk, and Compliance (GRC) Analyst (Remote) at RainFocus' canonical: 'https://feeny.ai/job/senior-governance-risk-and-compliance-grc-analyst-remote-rainfocus-orem-rhszjyqpy2mk' type: 'job' last_seen: '2026-09-07' --- # Senior Governance, Risk, and Compliance (GRC) Analyst (Remote) at RainFocus - **Company:** RainFocus - **Location:** Orem, UT - **Employment:** full-time - **Work type:** remote - **Posted:** 2026-08-12 - **Last confirmed live:** 2026-09-07 - **Apply:** https://jobs.lever.co/rainfocus/432d7749-fe11-4dd9-a707-d5b64c474424 ## Job description RainFocus, one of the most innovative software companies, is in search of an exceptional Senior Governance, Risk, and Compliance (GRC) Analyst. ## About RainFocus RainFocus cares about its employees, customers, and the world in which we live. Our rapidly growing team serves Fortune 500 companies like Adobe, Cisco, IBM, Oracle, VMware, and others to prepare and execute in-person, virtual, and hybrid events across the world. Those events are delivered through our industry-disrupting software platform, with groundbreaking business intelligence, to elevate the attendee experience, streamline event operations, and accelerate marketing results. We are well-funded, growing fast, and building a company that is changing the market — it will be challenging, fun, and exciting. ## About the Role We are seeking a highly skilled and motivated Senior GRC Analyst to join our Security and Privacy team. In this role, you will own and grow RainFocus's governance, risk, and compliance program — maintaining our control framework, leading risk assessments, supporting audits, and driving the program's maturity forward rather than simply maintaining the status quo. You will report directly to the CISO and have significant ownership from day one. Key Responsibilities: Lead RainFocus's GRC program across SOC 2, ISO 27001, PCI DSS, and other client/regulatory compliance frameworks, including audit prep, evidence collection, and auditor relationships. Manage and mature our control framework, mapping new regulations and conducting gap assessments. Own the annual security risk assessment process (NIST SP 800-30 methodology), including stakeholder interviews, risk scoring, and residual risk tracking. Maintain and update security policies, standards, and documentation to ensure compliance with industry best practices. Partner with Engineering and Security to mature vulnerability management and secrets-scanning practices, moving these from reactive to proactive, pre-deployment controls. Help build out and operationalize a Data Loss Prevention (DLP) program, including policy design and rollout across email, endpoint, and cloud storage. Grow and mature RainFocus's security awareness training program. Drive AI governance efforts — policy, tooling, and monitoring for approved vs. unapproved AI tool usage across the company. Identify and help close Shadow IT / unmanaged SaaS visibility gaps in partnership with IT. Collaborate with cross-functional teams to implement risk management practices and ensure compliance across the organization. Respond to security and privacy inquiries from clients, partners, and employees. Prepare and present reports on the organization's security and privacy compliance status, including program maturity and remediation progress. Stay abreast of emerging security threats, vulnerabilities, and compliance requirements. Qualifications: Bachelor's degree in Technology, Cybersecurity, or a related field is highly desirable. 6+ years of proven experience in GRC, IT audit, information security compliance, or a related field. In-depth knowledge of relevant regulations, standards, and frameworks (e.g., SOC 2, ISO 27001, PCI DSS, NIST 800-series, GDPR, and others). Experience running or contributing heavily to formal risk assessments — not just tracking a compliance checklist. Professional certifications such as CISA, CRISC, CISSP, CIPP, or CIPM are highly desirable. Familiarity with modern security tooling such as Drata, OneTrust, Vanta, etc. Strong analytical and problem-solving skills, with keen attention to detail. Excellent communication and interpersonal skills to work effectively with technical and non-technical stakeholders. Ability to manage multiple projects and meet deadlines in a fast-paced environment. Experience with cloud security and compliance frameworks is a plus. Experience with OneTrust or related GRC technologies is a plus. Personal Characteristics: Strong work ethic and commitment to excellence. Ability to work independently and as part of a team. Excellent problem-solving and analytical skills. Strong communication and interpersonal skills. Ability to adapt to change and learn quickly. Passion for security and privacy. ## About RainFocus ## Company Overview - **One-liner**: RainFocus provides a next-generation event marketing platform that captures and analyzes first-party data to optimize virtual, in-person, and hybrid events throughout the customer journey. - **Entity Type**: Private (Series C, total funding $44M) - **Headquarters**: Lehi, Utah, United States - **Founded**: 2013 - **Founders**: Doug Baird ## Core Business - **Primary industry**: Event marketing technology (SaaS) - **Target customers**: B2B, primarily Fortune 1000 enterprises and large-scale event organizers - **Mission or purpose statement**: To simplify event success and accelerate business relationships by using event data to boost business performance. ## Products & Services - **[RainFocus Platform]**: A single, cloud-based SaaS platform that manages the entire event lifecycle – registration, content management, exhibitor activation, virtual delivery, and on-site experiences. It integrates with sales and marketing technologies (e.g., Adobe) and provides real-time data for personalization, lead qualification, and omnichannel marketing. ## Market Standing - **Valuation/Market Cap**: Not publicly disclosed - **Key Metric**: Annual Revenue of $33M (latest estimate); Total Funding of $44M (Series C led by KKR in September 2021, with prior rounds from JMI Equity) - **Notable Investors/Partners**: KKR, JMI Equity, Adobe (Certified Platinum Partner) - **Growth Signals**: Headcount of 371 (+7.7% YoY, +32 people); named a Leader in The Forrester Wave™ B2B Event Management Technology report; recognized on the 2023 Inc. 5000 list of fastest-growing private companies; acquired WebEvents Global in September 2024; serves major clients like Oracle CloudWorld, VMworld, and Cisco Live. ## Competitive Advantages - **First-party data focus**: The platform is built to capture and analyze unprecedented amounts of event data, enabling personalized experiences and measurable ROI. - **Real-time integration**: Seamless integration with existing sales and marketing stacks (e.g., Adobe, Salesforce) for omnichannel targeting. - **Scalability and reliability**: Proven to power some of the world’s largest and most complex events. - **Leader in analyst reports**: Recognized as a Leader in the Forrester Wave for B2B Event Management Technology. ## Strategic Focus - **Growth through acquisition and product expansion**: Acquisition of WebEvents Global signals expansion into broader event services. - **Accessibility and compliance**: Actively working toward WCAG 2.2 conformance and has an internal accessibility specialist team. - **Remote-first talent acquisition**: Hiring globally for remote roles to scale the team while maintaining a strong HQ presence in Lehi, Utah. ## Why Work Here - **Culture**: Consistently recognized as a Utah Top Workplace (2022, 2023) and Top Workplace USA (2021); values include innovation, customer-centricity, teamwork, and work-life balance. - **Remote/Hybrid policy**: Fully remote roles available (e.g., Project Manager, Full Stack Developer, Client Care Analyst) with a physical HQ in Lehi, Utah. - **Benefits**: Comprehensive health insurance, paid time off, wellness benefits, and a focus on supporting family and private lives. - **Engineering culture**: Emphasis on challenging the status quo, continuous improvement, and open communication; opportunities to work on cutting-edge event technology at scale. ## Sources 1. [rainfocus.com](https://www.rainfocus.com/company/about-us/) 2. [rainfocus.com](https://www.rainfocus.com/company/careers/) 3. [linkedin.com](https://linkedin.com/company/rainfocus) 4. [builtin.com](https://builtin.com/company/rainfocus) 5. [jobs.lever.co](https://jobs.lever.co/rainfocus) ## Other roles at RainFocus - [Client Care Analyst (Remote)](https://feeny.ai/job/client-care-analyst-remote-rainfocus-orem-asddc8p9hdfj) — Orem, UT - [Sr. Product Marketing Manager - Audience Engagement (Remote)](https://feeny.ai/job/sr-product-marketing-manager-audience-engagement-remote-rainfocus-orem-80z147xj2e7e) — Orem, UT - [Full Stack Developer (Remote)](https://feeny.ai/job/full-stack-developer-remote-rainfocus-orem-rqa049wdg31r) — Orem, UT - [Product Manager, API Integrations (Remote)](https://feeny.ai/job/product-manager-api-integrations-remote-rainfocus-orem-qze851yjxxcs) — Orem, UT - [Technical Project Manager (Remote)](https://feeny.ai/job/technical-project-manager-remote-rainfocus-lehi-9f8vp3shgmcd) — Lehi, UT - [Sr. Product Marketing Manager - Events (Remote)](https://feeny.ai/job/sr-product-marketing-manager-events-remote-rainfocus-lehi-qfp4p7wzwhmv) — Lehi, UT - [Sales Engineer (Remote)](https://feeny.ai/job/sales-engineer-remote-rainfocus-any-state-pnx9n06a3595) — Any State - [Cybersecurity Engineer (Remote)](https://feeny.ai/job/cybersecurity-engineer-remote-rainfocus-lehi-z19anvy7m6x9) — Lehi, UT - [Integration Specialist (Remote)](https://feeny.ai/job/integration-specialist-remote-rainfocus-lehi-7hadr5tj1xb5) — Lehi, UT - [International Project Manager (Remote)](https://feeny.ai/job/international-project-manager-remote-rainfocus-london-gyw4n4tehpdz) — London, United Kingdom