Sr. Security Analyst, GRC

About DAT

Discover your future at DAT Freight & Analytics, where innovation meets impact. For over four decades, DAT has been at the forefront of transportation and logistics, helping businesses move freight with greater efficiency and confidence. We are a technology company that removes uncertainty from freight for truckers, brokers, and shippers every day. Our advanced tools and data intelligence empower professionals to make smarter decisions, optimize costs, and operate more successfully. Through the industry's largest digital freight marketplace and insights derived from over $1 trillion in freight transactions, we provide the mission-critical information that keeps supply chains running smoothly across the country. DAT is proud to be an award-winning workplace that fosters innovation, celebrates success, and values professional growth. With strategic offices in Beaverton, Oregon, Denver, Colorado, Springfield, Missouri, and Bangalore, India, our teams collaborate to solve the transportation industry's most complex challenges. Ready to shape the future of freight technology? Learn more atdat.com/company.

Application Deadline:9/30/2025

The Opportunity

DAT is looking for a Sr. Security Analyst, GRC to join our security team. This position can be based in our Denver, CO office.

The Sr. Security Analyst, GRC will play a key role in helping to plan, organize, and manage governance, risk, and compliance efforts in alignment with the company's overall security and data privacy programs. You will also work to perform risk assessments on current internal systems, as well as assess the security controls of current and proposed vendors in alignment with DAT's security policies and standards.

What You'll Do

• Own and lead internal and external audit engagements, including evidence collection, control testing, and remediation follow-up, ensuring continual compliance across multiple business units.
• Drive risk management activities, including risk identification, assessment, tracking, and reporting, to inform leadership and strengthen the enterprise risk posture.
• Lead Business Impact Assessments (BIA) and collaborate with stakeholders to align critical processes with recovery objectives.
• Oversee Disaster Recovery (DR) and Business Continuity Planning (BCP) activities, including tabletop exercises, plan maintenance, and validation of recovery strategies.
• Partner with business and technology leaders to mature governance, risk, and compliance processes, streamline reporting, and reduce recurring issues.
• Provide mentorship and guidance to junior analysts across GRC domains, fostering a culture of compliance and risk awareness.

The Skills and Experience You'll Bring

• Team Player with strong communication, organizational, and relationship management skills.
• Self-motivated, with keen attention to detail and excellent judgment skills.
• Strong knowledge of security frameworks and regulations (e.g., NIST CSF, ISO 27001, SOX, PCI-DSS, HIPAA).
• Demonstrated ability to own audit engagements end-to-end, from planning through evidence submission and remediation follow-up.
• Strong stakeholder management skills with the ability to communicate clearly at both technical and executive levels.
• Experience leading cross-functional initiatives to improve compliance posture or remediate findings.
• Excellent organizational and project management skills, with attention to detail and deadlines.
• Ability to write and present articulated documentation and processes.
• Knowledge of hybrid IT systems, networking, co-locations, and cloud environments.
• S. degree in cybersecurity, computer science, information technology or 1+ years IT work experience in the area of Governance, Risk and Compliance.
• Proven experience (5+ years) in IT audit, compliance, or security control assessment within a regulated industry.
• Professional certification preferred (e.g., CISA, CISSP, CISM, or equivalent).

Why DAT?

DAT is an award winning employer of choice.

For starters, we have a hybrid work environment, but we also know what makes a great workplace. We have a time-tested and resolute set of operating values predicated on integrity, mutual respect, open communication, and executing with excellence. These values inform our strategic vision as much as any one of our products does. We've been an employer of choice in the Portland metropolitan area for four decades, and within one year of opening our Denver office, DAT was #26 on Built In Colorado's 100 Best Places to Work In Colorado.

• Medical, Dental, Vision, Life, and AD&D insurance
• Parental Leave
• Up to 20 days of paid time off starting in year one
• An additional 10 holidays of paid time off per calendar year
• 401k matching (immediately vested)
• Employee Stock Purchase Plan
• Short- and Long-term disability sick leave
• Flexible Spending Accounts
• Health Savings Accounts
• Tuition Reimbursement Program
• Employee Assistance Program
• Additional programs - Employee Referral, Internal Recognition, and Wellness
• Free TriMet transit pass (Beaverton Office)
• Competitive salary and benefits package
• Work on impactful projects in a cutting-edge environment
• Collaborative and supportive team culture
• Opportunity to make a real difference in the trucking industry
• Employee Resource Groups

For Colorado-based candidates, in compliance with Colorado's Equal Pay for Equal Work Act, the minimum salary for this role is $113,000 + benefits. The maximum compensation for this role can vary significantly depending on your job-related skills and experience. DAT considers factors such as scope and responsibilities of the position, candidate's work experience, education and training, core skills, internal equity, and market and business elements when extending an offer.

DAT embraces the value of a diverse workforce, and believes it is a core strength of our company that we encourage those values in every DAT employee, at every level of our organization, regardless of tenure or rank. We provide equal employment opportunities (EEO) to all employees and applicants without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state, and local laws.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

#LI-DR1