Hybrid role in Irvine, CA with a compensation range of USD 90,000 - 100,000 per year. Kura Sushi Corporate Support Center offers a benefits package built for stability and long-term growth, including 401(k), health and wellness benefits (medical, dental, and vision), paid time off (vacation accrual and sick time per eligibility and applicable requirements), and a performance bonus for eligible positions. Eligible team members may also have access to a long-term investment program.
In this GRC Senior Security Analyst position, you’ll help safeguard Kura’s IT infrastructure by combining real-time security monitoring with governance, risk, and compliance execution. The role supports a security-by-design approach under the direction of the Integrated GRC Senior Manager, including security awareness training, incident response participation, and ongoing reporting to senior leadership.
Responsibilities
- Monitor activity across Kura Sushi USA environments and respond to security alerts in real time.
- Analyze system logs, intrusion detection alerts, and suspicious activity; perform forensic analysis using SIEM and environment telemetry or log events.
- Conduct vulnerability assessments and penetration testing, including periodic assessments and threat hunting to address potential security weaknesses.
- Investigate and document security incidents, including root cause analysis, and support execution of assigned duties within the incident response plan.
- Provide guidance on firewall security configurations, IPS/IDS, and endpoint protection systems; support secure system configurations aligned with security policies.
- Develop and enforce security and data governance through policies, procedures, and compliance standards.
- Collaborate with ACAS and IT teams to strengthen security controls, improve compliance outcomes, and reduce operational risk.
- Evaluate, recommend, and implement security solutions to improve core security capabilities, including access management and network security.
- Prepare regular security reports for management and provide regular reporting on security posture progress to the VP of ACAS and applicable senior management.
- Conduct security awareness training and compliance education to build a culture of security.
- Perform annual security risk assessments and investigate compliance breaches with root cause analysis and corrective actions to prevent recurrence.
- Act as a point of contact between the organization and regulatory agencies, including handling inspections and assessments.
- Review contracts involving PII and system components to ensure Data Processing Agreements (DPAs) are issued to third-party vendors.
- Support remediation by evaluating IT control/process deficiencies issued by Internal Audit and providing remediation plans for recommended design improvements.
- Develop reporting metrics and dashboards, obtain and retain evidence, and provide it to the Integrated GRC Senior Manager, VP of ACAS, or leadership as needed.
- Contribute to the Data Governance program and help align security strategies and initiatives with business objectives.
- Provide guidance to ACAS and IT management to build a strong IT/security compliant environment and mentor team members involved in compliance, security, and change management processes.
- Attend continuing professional education to keep abreast of security and technology regulations, emerging risks, and strategies.
- Support monthly progress updates based on the annual plan and complete other assigned projects from the Integrated GRC Senior Manager or VP of ACAS.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
- Relevant certifications such as CISSP or CISM, and GIAC or CEH.
- At least 5 years of experience in cybersecurity or IT security roles with strong understanding of security frameworks and standards such as NIST, ISO 27001, and CIS.
- Governance, risk, and compliance experience from a Big 4 consulting firm or a fortune 500 company.
- Hands-on experience in incident response and forensic analysis.
- Knowledge of cloud security in AWS, Azure, or GCP environments.
- Familiarity with threat intelligence platforms and malware analysis.
- Regulatory compliance knowledge including CCPA, PCI DSS, SOX, and GDPR.
- Proficiency with Optro (formerly AuditBoard)-Cross Comply and various security tools.
- SIEM proficiency with tools such as Splunk, Google Security Operations, QRadar, or ArcSight.
- Knowledge of firewalls, intrusion detection/prevention systems (IPS/IDS), and endpoint security.
- Knowledge of security and data platforms including Netskope, CheckPoint, Zscaler, BigID, and MS Purview.
- Ability to conduct vulnerability assessments and penetration testing.
- Basic scripting skills in Python, PowerShell, or Bash.
- Strong leadership and people management skills, with experience documenting security, risk, and regulatory compliance activities.
- Experience with security/technology auditing processes, dashboard creation, and building solutions/options for stakeholders.
- Confident communication with executive management and cross-functional peers; ability to liaise with Internal Audit to support appropriate IT General Controls (ITGCs).
- Excellent analytical and troubleshooting skills; ability to work under pressure.
Indicated office requirement: This is a hybrid position. The selected candidate must be able to come to the office in Irvine, CA on in-office days and as needed to carry out necessary functions of the role.
