Hiring GRC Analyst

Role & responsibilities

• Developed and implemented IT / Security policies, standards, and controls to ensure compliance with industry standards and regulations, including the alignment of Policies & Standards Libraries.
• Coordinate and manage IT audits (Internal, external, and regulatory audits), compliance assessments, and gap analyses, ensuring adherence to regulatory requirements and internal standards, while incorporating Compliance Management and Assessment tools for continuous monitoring and improvement.
• Coordinate and oversee Technology/Security Audits, ensuring governance of IT/Information Security audit findings and facilitating their timely remediation through Risk to Controls Alignment and continuous Systems, Database & Application Configuration Checks.
• Provide expert information and cyber security advisory services to internal business partners, aiding them in navigating complex security challenges by leveraging Asset Management and Access Control Management strategies.
• Conduct rigorous security and technology control testing and self-assessments to identify vulnerabilities and areas for improvement.
• Support management reporting efforts by furnishing Security Governance & Technology Risk committees with pertinent monthly metrics and comprehensive reports.

Preferred candidate profile

• Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.
• You are passionate about learning and are familiar with IT control frameworks, cybersecurity risk management, and regulatory compliance requirements.
• You have excellent communication skills and can work effectively with both technical and non-technical stakeholders to drive cybersecurity initiatives.
• Strong analytical skills, including the ability to review processes and controls, identify weak points and advise all levels of management on remediation actions.
• Ability to quick adjust to new priorities and address items as they are identified.
• Strong written and verbal communication skills to include a very high level of proficiency in Microsoft Word, PowerPoint and Excel, accompanied with talent to simplify and explain technical concepts to a no-technical business audience.
• Experience in designing controls and working with internal and external auditors is a plus.
• Experience with cybersecurity frameworks such as NIST CSF, NIST 800-53, ISO 27001 and PCI is a plus.
• CISSP, CISA, CISM, PCI ISA certification is a plus
• Business fluent English