Senior GRC Data Entry Specialist – Remote (Part‑Time / Full‑Time) – Governance, Risk & Compliance for arenaflex

About arenaflex – Shaping the Future of Secure Entertainment

arenaflex is a global leader in creating magical experiences that delight millions of fans worldwide. While our core business revolves around storytelling, theme parks, and immersive media, we are equally committed to safeguarding the digital assets and data that power these experiences. Our Governance, Risk, and Compliance (GRC) team is the backbone of this mission, ensuring that every piece of information is protected, every regulatory requirement is met, and every stakeholder can trust the integrity of our operations. As a remote‑first organization, arenaflex offers flexible work arrangements, cutting‑edge technology, and a culture that celebrates curiosity, collaboration, and continuous learning.

Position Overview – Senior GRC Data Entry Specialist (Remote)

arenaflex is seeking an experienced GRC professional to join our Cybersecurity & Compliance crew as a Data Entry Specialist. This role is pivotal in guiding GRC‑related activities, maintaining the accuracy of risk‑assessment data, and supporting the execution of third‑party risk management (TPRM) processes. The successful candidate will work closely with business stakeholders, internal audit teams, and the Governance, Threat, and Compliance Manager to ensure that all risk‑related documentation is captured, validated, and reported with the highest level of precision.

Key Responsibilities

• Third‑Party Risk Management (TPRM) Data Coordination: Validate incoming risk assessment requests, collaborate with business owners to define scope, and ensure all data points are accurately captured in arenaflex’s risk management platform.
• Questionnaire Administration: Distribute, collect, and review due‑diligence questionnaires from internal and external stakeholders, confirming completeness and identifying gaps in security controls.
• Documentation & Reporting: File findings, remediation plans, and audit evidence in arenaflex’s compliance systems; draft and review risk assessment reports for senior leadership approval.
• Stakeholder Liaison: Serve as the primary point of contact for queries related to risk control techniques, providing clear explanations to business units and third‑party partners.
• Continuous Monitoring: Track the status of open risk items, update findings in real time, and drive issues to closure in alignment with arenaflex’s remediation timelines.
• Process Improvement: Identify opportunities to streamline data entry workflows, propose enhancements to the TPRM platform, and collaborate with the compliance lead on system‑wide optimizations.
• Regulatory & Standards Alignment: Support the maintenance of ISO 27001, SOC 2, SSAE 18, and other relevant frameworks by ensuring data integrity and timely evidence collection.
• Education & Communication: Contribute to the development of compliance training materials and internal communications that reinforce a culture of security awareness across arenaflex.

Essential Qualifications

• Bachelor’s degree in Information Security, Business Administration, or a related field, or equivalent professional experience.
• Minimum of 4 years of hands‑on experience in third‑party risk management, data security, or audit & compliance tracking, with at least 2‑3 years focused on TPRM or internal audit processes.
• Demonstrated expertise in risk assessment methodologies, both qualitative and quantitative.
• Strong working knowledge of ISO 27001, SOC 2, SSAE 16/18, and other industry‑standard compliance frameworks.
• Professional certifications such as CISA, CRISC, ISO 27001 Lead Implementer, CISSP, or equivalent are highly preferred.
• Proficiency with GRC tools and platforms (e.g., ServiceNow GRC, RSA Archer, MetricStream) and advanced Excel or data‑visualization skills.

Preferred Qualifications & Additional Skills

• Experience working within a large, complex organization or a Big‑Four consulting environment.
• Familiarity with AI/ML concepts as they apply to risk analytics and automated compliance monitoring.
• Exceptional analytical and problem‑solving abilities, with a track record of delivering actionable insights from large data sets.
• Outstanding written and verbal communication skills, capable of translating technical risk concepts into business‑friendly language.
• Ability to thrive in a fast‑paced, remote work environment, managing multiple priorities and adapting to shifting deadlines.

Core Competencies & Personal Attributes

• Stakeholder Management: Build trusted relationships across IT, legal, finance, and business units to facilitate seamless data collection and risk reporting.
• Attention to Detail: Ensure every data entry point is accurate, complete, and compliant with internal standards.
• Adaptability: Quickly adjust to evolving regulatory landscapes and internal policy changes.
• Presentation Skills: Deliver clear, concise risk summaries to senior leadership and external auditors.
• Team Collaboration: Work effectively with cross‑functional teams, sharing knowledge and supporting collective goals.

Career Growth & Learning Opportunities

arenaflex invests heavily in the professional development of its employees. As a Senior GRC Data Entry Specialist, you will have access to:

• Mentorship from seasoned cybersecurity leaders and compliance architects.
• Sponsored certifications (CISA, CRISC, CISSP, ISO 27001) and tuition reimbursement for advanced degrees.
• Opportunities to transition into senior GRC analyst, risk manager, or cybersecurity program lead roles.
• Participation in global security conferences, webinars, and internal knowledge‑sharing forums.
• Cross‑training across arenaflex’s diverse business units, gaining exposure to entertainment technology, digital media, and theme‑park operations.

Work Environment & Culture at arenaflex

Our remote‑first policy empowers you to work from anywhere while staying connected to a vibrant, inclusive community. arenaflex’s culture is built on:

• Innovation: Encouraging creative problem‑solving and the exploration of emerging technologies.
• Collaboration: Regular virtual “coffee chats,” team‑wide stand‑ups, and cross‑departmental hackathons.
• Well‑Being: Flexible hours, mental‑health resources, and a generous paid‑time‑off policy.
• Diversity & Inclusion: A commitment to hiring and developing talent from all backgrounds, ensuring every voice is heard.

Compensation, Perks & Benefits

arenaflex offers a competitive total‑reward package that includes:

• Base salary up to $80,000 USD per year, commensurate with experience and qualifications.
• Performance‑based bonuses and annual salary reviews.
• Comprehensive health, dental, and vision insurance plans.
• Retirement savings options with company matching contributions.
• Remote work stipend for home‑office setup, high‑speed internet, and ergonomic equipment.
• Generous paid parental leave, volunteer time off, and employee assistance programs.
• Access to a global learning platform, including courses on cybersecurity, data analytics, and leadership development.

Why Join arenaflex?

At arenaflex, you will be part of a mission‑driven organization that blends creativity with cutting‑edge security practices. Your work will directly protect the data that fuels unforgettable experiences for audiences worldwide. If you are passionate about GRC, thrive in a remote environment, and want to grow your career within a forward‑thinking, values‑focused company, we want to hear from you.

Application Process

Ready to bring your expertise to arenaflex? Submit your resume and a concise cover letter outlining your relevant experience, certifications, and why you are excited about this role. Our recruitment team will review applications on a rolling basis and reach out to qualified candidates for the next steps.

Join the arenaflex Team Today

Take the next step in your GRC career and help shape a secure future for one of the world’s most beloved entertainment brands. Apply now and become a trusted guardian of data, risk, and compliance at arenaflex.