Jr. Security Analyst, GRC

About DAT

Discover your future at DAT Freight & Analytics, where innovation meets impact. For over four decades, DAT has been at the forefront of transportation and logistics, helping businesses move freight with greater efficiency and confidence. We are a technology company that removes uncertainty from freight for truckers, brokers, and shippers every day. Our advanced tools and data intelligence empower professionals to make smarter decisions, optimize costs, and operate more successfully. Through the industry's largest digital freight marketplace and insights derived from over $1 trillion in freight transactions, we provide the mission-critical information that keeps supply chains running smoothly across the country. DAT is proud to be an award-winning workplace that fosters innovation, celebrates success, and values professional growth. With strategic offices in Beaverton, Oregon, Denver, Colorado, Springfield, Missouri, and Bangalore, India, our teams collaborate to solve the transportation industry's most complex challenges. Ready to shape the future of freight technology? Learn more at dat.com/company.

Application Deadline: 10/1/2025

The Opportunity

DAT is looking for a Jr. Security Analyst, GRC to join our security team. This position can be based in our Denver, CO office.

The Jr. Security Analyst, GRC will play a key role in helping to plan, organize, and manage governance, risk, and compliance efforts in alignment with the company’s overall security and data privacy programs. You will also work to perform risk assessments on current internal systems, as well as assess the security controls of current and proposed vendors in alignment with DAT’s security policies and standards.

What You’ll Do

• Maintain continual compliance by monitoring control evidence, following up on outstanding items, and driving closure with stakeholders.
• Manage all existing Information Security Policies and Standards, ensure they stay relevant and are available to all impacted teams. Identify and help to create new information security policies and standards that align with NIST CSF 2.0 and relevant compliance requirements. 
• Conduct information security risk assessments and assist in documenting identified risks and treatment plans in DAT’s Risk Register. 
• Participate in enhancing Disaster Recovery and Business Continuity Plans ensuring all annual requirements are successfully completed, documented, and communicated as appropriate.
• Identify opportunities to automate or simplify compliance where possible.
• Work with cross functional teams to drive security related initiatives.
• Help to identify, develop, and execute security awareness opportunities to the DAT

The Skills and Experience You’ll Bring

• BS. degree in cybersecurity, computer science, information technology or 1+ years IT work experience in the area of Governance, Risk and Compliance.
• Team Player with strong communication, organizational, and relationship management skills. 
• Self-motivated, with keen attention to detail and excellent judgment skills.
• Familiarity with implementing Information Security control frameworks and standards.
• Skill with alignment, mapping, continuous improvement of internal security controls framework and control owner relationships, control exceptions, risk assessments, audit readiness coordination, or security control requirement services.
• Familiarity with developing Disaster Recovery and Business Continuity plans in alignment with security strategy, regulatory or legal obligations.
• Familiarity with developing Vendor Risk Management plans and activities in alignment with security strategy, regulatory or legal obligations.
• Familiarity with GRC, and Risk Management Tools and solutions. 
• Familiarity with information security tools and solutions.
• Familiarity with Reporting key operational, and program metrics designed to deliver transparency of compliance readiness, security framework alignment, program maturity and operations.
• Ability to write and present articulated documentation and processes.
• Familiarity of hybrid IT systems, networking, co-locations, and cloud environments.
• CISA, CRISC, CISM, or CISSP Certification is a plus.

Why DAT?

DAT is an award winning employer of choice.

For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic