Sr. Security Analyst, GRC

About DAT

Discover your future at DAT Freight & Analytics, where innovation meets impact. For over four decades, DAT has been at the forefront of transportation and logistics, helping businesses move freight with greater efficiency and confidence. We are a technology company that removes uncertainty from freight for truckers, brokers, and shippers every day. Our advanced tools and data intelligence empower professionals to make smarter decisions, optimize costs, and operate more successfully. Through the industry's largest digital freight marketplace and insights derived from over $1 trillion in freight transactions, we provide the mission-critical information that keeps supply chains running smoothly across the country. DAT is proud to be an award-winning workplace that fosters innovation, celebrates success, and values professional growth. With strategic offices in Beaverton, Oregon, Denver, Colorado, Springfield, Missouri, and Bangalore, India, our teams collaborate to solve the transportation industry's most complex challenges. Ready to shape the future of freight technology? Learn more at dat.com/company.

Application Deadline: 9/30/2025

The Opportunity

DAT is looking for a Sr. Security Analyst, GRC to join our security team. This position can be based in our Denver, CO office.

The Sr. Security Analyst, GRC will play a key role in helping to plan, organize, and manage governance, risk, and compliance efforts in alignment with the company’s overall security and data privacy programs. You will also work to perform risk assessments on current internal systems, as well as assess the security controls of current and proposed vendors in alignment with DAT’s security policies and standards.

What You’ll Do

• Own and lead internal and external audit engagements, including evidence collection, control testing, and remediation follow-up, ensuring continual compliance across multiple business units.
• Drive risk management activities, including risk identification, assessment, tracking, and reporting, to inform leadership and strengthen the enterprise risk posture.
• Lead Business Impact Assessments (BIA) and collaborate with stakeholders to align critical processes with recovery objectives.
• Oversee Disaster Recovery (DR) and Business Continuity Planning (BCP) activities, including tabletop exercises, plan maintenance, and validation of recovery strategies.
• Partner with business and technology leaders to mature governance, risk, and compliance processes, streamline reporting, and reduce recurring issues.
• Provide mentorship and guidance to junior analysts across GRC domains, fostering a culture of compliance and risk awareness.

The Skills and Experience You’ll Bring

• Team Player with strong communication, organizational, and relationship management skills. 
• Self-motivated, with keen attention to detail and excellent judgment skills.
• Strong knowledge of security frameworks and regulations (e.g., NIST CSF, ISO 27001, SOX, PCI-DSS, HIPAA).
• Demonstrated ability to own audit engagements end-to-end, from planning through evidence submission and remediation follow-up.
• Strong stakeholder management skills with the ability to communicate clearly at both technical and executive levels.
• Experience leading cross-functional initiatives to improve compliance posture or remediate findings.
• Excellent organizational and project management skills, with attention to detail and deadlines.
• Ability to write and present articulated documentation and processes.
• Knowledge of hybrid IT systems, networking, co-locations, and cloud environments.
• S. degree in cybersecurity, computer science, information technology or 1+ years IT work experience in the area of Governance, Risk and Compliance.
• Proven experience (5+ years) in IT audit, compliance, or security control assessment within a regulated industry.
• Professional certification preferred (e.g., CISA, CISSP, CISM, or equivalent).

Why DAT?

DAT is an award winning employer of choice.

For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We’ve been an employer of choice in the Portland metropolitan area for four decades, and within one year of op