Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 4 days ago

Staff GRC Analyst-Austin or San Antonio, Texas

H-E-B1,206 open roles

Where
San Antonio, Texas, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowStaff GRC Analyst-Austin or San Antonio, TexasH-E-B · San Antonio, Texas, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on H-E-B's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. H-E-B postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 4 days ago

H-E-B median: 2 days open

The posting

Responsibilities Job Summary: As a Staff Governance, Risk & Compliance (GRC) Analyst, you'll assess and document H-E-B's information asset compliance and risk posture while serving as a trusted advisor to engineering, architecture, and business teams. You'll review technology solutions, identify security risks, provide risk-based recommendations, and help drive secure outcomes across the organization. This role also provides coaching and mentorship to team members and stakeholders, helping strengthen security awareness and risk management practices across the business. Location: San Antonio (Preferred) or Austin, TX-On-Site Key Responsibilities & Essential Functions: Analytics / Information Technology / Auditing: Contributes to development / continuous improvement of H-E-B security program goals and objectives. Leads development / implementation of system-wide risk management function to ensure information security risks are identified / monitored. Serves as SME and advisor to help manage risk at an acceptable level. Collaborates to define information security policies, standards, and procedures, and to ensure controls are adequate, appropriate, and effective. Establishes / maintains control objectives and procedures; maintains a risk register to identify / evaluate / prioritize / monitor risk findings to be reported to executive committee. Performs internal risk assessments; validates effectiveness of security controls; recommends appropriate actions to mitigate risks; assesses / evaluates / makes recommendations related to adequacy of security controls. Supports vendor due-diligence process; helps define overall third-party risk management efforts. Supports internal and external audit processes for related compliance requirements. Supports vulnerability management efforts (e.g., remediation tracking, status reporting, enhancements) Liaises with external auditors on regulatory assessments. Stays current on developing regulatory concerns and changing IT and InfoSec trends. Ensures robust reporting processes related to security topics. Coaches / mentors team Partners The responsibilities and essential functions outlined above describe the general nature and level of work assigned to this position. This is not an exhaustive list of all duties, responsibilities, and skills required. Duties and responsibilities may be modified at any time based on business needs. Employees may be required to perform other job-related tasks as requested by their supervisor, subject to reasonable accommodations. Qualifications & Key Requirements: Work Experience: 7+ years of experience in Cybersecurity, Information Security, GRC, Security Architecture, or Security Consulting, Risk Management. Experience evaluating the security design, architecture, and implementation of enterprise applications, platforms, cloud environments, and technology solutions. Strong understanding of modern technologies including cloud platforms (AWS, Azure, or GCP), Identity and Access Management (IAM), application security, data security, and enterprise security controls. Experience conducting security assessments, architecture reviews, threat modeling, risk assessments, or similar technical security evaluations Ability to partner with engineers, architects, product teams, and business stakeholders to identify security risks and influence secure design decisions. Experience presenting security risks, recommendations, and business impact to senior leaders, including Directors, VPs, or executive stakeholders. Knowledge of security and regulatory frameworks such as PCI DSS, HIPAA, SOX ITGC, NIST 800-53, or similar standards. Knowledge/Skills/Abilities: Advanced working knowledge of security issues for desktop, virtual, cloud services, and network infrastructures; of risk management methodologies, frameworks, principles (e.g., NIST, ISO 27001, ITIL, PCI, CCPA, SOC 2, SOX, etc.), and IT GRC / IRM platforms Advanced interpersonal and relationship-building skills Advanced communication and presentation skills Advanced problem-solving skills Strong time management and prioritization skills; detail-oriented Ability to quickly connect business requirements with GRC functional capabilities. Ability to professionally handle confidential information. Ability to meet deadlines and prioritize appropriately on concurrent projects. Ability to analyze for potential future issues. Ability to stay current on technology trends and quickly learn new technologies. Ability to communicate and collaborate at all levels. Education: A related degree or comparable formal training, certification, or work experience Licenses/Certifications: One or more professional security certifications (e.g., CISSP, CISA, CISM, CRISC) Physical Demands & Working Conditions: Function in a fast-paced, retail, office environment Work extended hours / sit for extended periods. The work environment characteristics described here are representative of those a Partner encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. JDSECURITY JDENGINEERING

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against H-E-B's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on H-E-B's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    H-E-B's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.