GRC Analyst

Job Requirements:

• Participate in global security risk assessments.
• Provide regular GRC reports to leadership.
• Conduct risk assessments and work with risk owners on mitigation.
• Maintain and update the Cybersecurity Risk Register.
• Ensure compliance with policies, regulations, and audit recommendations.

Policies, Regulatory, and Compliance:

• Collaborate with Internal Audit, Legal, and consultants on security assessments.
• Support audits, compliance checks, and regulatory assessments (PCI DSS, ISO, HIPAA, NIST 800-171).
• Conduct privacy gap analysis and ensure compliance.
• Track IT and security audits, managing scope, timelines, and outcomes.
• Oversee third-party vendors to ensure timely project completion.
• Provide guidance on audit responses.

Preferred Skills/Experience:

• Bachelor's in Information Systems, Cybersecurity, or related field preferred.
• Certifications (CISA, CISSP, CISM) are a plus.
• Experience in security governance, compliance, and risk management.
• Knowledge of security standards, PCI DSS, ISO 27001, SOC2 audits.
• Experience in security policy development and implementation.
• Hands-on experience in maturing security programs.

Professional Skills:

• Strong problem-solving and collaboration skills.
• Excellent communication and teamwork across global teams.
• Ability to present, facilitate, and engage effectively.