GRC Senior Security Analyst

Hybrid role in Irvine, CA with a compensation range of USD 90,000 - 100,000 per year. Kura Sushi Corporate Support Center offers a benefits package built for stability and long-term growth, including 401(k), health and wellness benefits (medical, dental, and vision), paid time off (vacation accrual and sick time per eligibility and applicable requirements), and a performance bonus for eligible positions. Eligible team members may also have access to a long-term investment program.

In this GRC Senior Security Analyst position, you’ll help safeguard Kura’s IT infrastructure by combining real-time security monitoring with governance, risk, and compliance execution. The role supports a security-by-design approach under the direction of the Integrated GRC Senior Manager, including security awareness training, incident response participation, and ongoing reporting to senior leadership.

Responsibilities

• Monitor activity across Kura Sushi USA environments and respond to security alerts in real time.
• Analyze system logs, intrusion detection alerts, and suspicious activity; perform forensic analysis using SIEM and environment telemetry or log events.
• Conduct vulnerability assessments and penetration testing, including periodic assessments and threat hunting to address potential security weaknesses.
• Investigate and document security incidents, including root cause analysis, and support execution of assigned duties within the incident response plan.
• Provide guidance on firewall security configurations, IPS/IDS, and endpoint protection systems; support secure system configurations aligned with security policies.
• Develop and enforce security and data governance through policies, procedures, and compliance standards.
• Collaborate with ACAS and IT teams to strengthen security controls, improve compliance outcomes, and reduce operational risk.
• Evaluate, recommend, and implement security solutions to improve core security capabilities, including access management and network security.
• Prepare regular security reports for management and provide regular reporting on security posture progress to the VP of ACAS and applicable senior management.
• Conduct security awareness training and compliance education to build a culture of security.
• Perform annual security risk assessments and investigate compliance breaches with root cause analysis and corrective actions to prevent recurrence.
• Act as a point of contact between the organization and regulatory agencies, including handling inspections and assessments.
• Review contracts involving PII and system components to ensure Data Processing Agreements (DPAs) are issued to third-party vendors.
• Support remediation by evaluating IT control/process deficiencies issued by Internal Audit and providing remediation plans for recommended design improvements.
• Develop reporting metrics and dashboards, obtain and retain evidence, and provide it to the Integrated GRC Senior Manager, VP of ACAS, or leadership as needed.
• Contribute to the Data Governance program and help align security strategies and initiatives with business objectives.
• Provide guidance to ACAS and IT management to build a strong IT/security compliant environment and mentor team members involved in compliance, security, and change management processes.
• Attend continuing professional education to keep abreast of security and technology regulations, emerging risks, and strategies.
• Support monthly progress updates based on the annual plan and complete other assigned projects from the Integrated GRC Senior Manager or VP of ACAS.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Relevant certifications such as CISSP or CISM, and GIAC or CEH.
• At least 5 years of experience in cybersecurity or IT security roles with strong understanding of security frameworks and standards such as NIST, ISO 27001, and CIS.
• Governance, risk, and compliance experience from a Big 4 consulting firm or a fortune 500 company.
• Hands-on experience in incident response and forensic analysis.
• Knowledge of cloud security in AWS, Azure, or GCP environments.
• Familiarity with threat intelligence platforms and malware analysis.
• Regulatory compliance knowledge including CCPA, PCI DSS, SOX, and GDPR.
• Proficiency with Optro (formerly AuditBoard)-Cross Comply and various security tools.
• SIEM proficiency with tools such as Splunk, Google Security Operations, QRadar, or ArcSight.
• Knowledge of firewalls, intrusion detection/prevention systems (IPS/IDS), and endpoint security.
• Knowledge of security and data platforms including Netskope, CheckPoint, Zscaler, BigID, and MS Purview.
• Ability to conduct vulnerability assessments and penetration testing.
• Basic scripting skills in Python, PowerShell, or Bash.
• Strong leadership and people management skills, with experience documenting security, risk, and regulatory compliance activities.
• Experience with security/technology auditing processes, dashboard creation, and building solutions/options for stakeholders.
• Confident communication with executive management and cross-functional peers; ability to liaise with Internal Audit to support appropriate IT General Controls (ITGCs).
• Excellent analytical and troubleshooting skills; ability to work under pressure.

Indicated office requirement: This is a hybrid position. The selected candidate must be able to come to the office in Irvine, CA on in-office days and as needed to carry out necessary functions of the role.