GRC Compliance Analyst - Remote

Overview

The GRC Compliance Analyst will be a key member of the Global Information Security team, responsible for collaborating with the business on GRC activities, administering GRC solutions, managing the Vendor Security Risk Management Program, and ensuring compliance objectives are achieved.

In Short

• Assist in conducting enterprise-wide risk analysis.
• Manage Vendor Security Risk Management Program.
• Support customer risk assessments and audits.
• Develop and maintain Information Security Risk Register.
• Monitor control effectiveness and escalate issues.
• Contribute to Metrics and Measures Program.
• Assist in security requirement documentation.
• Ensure risk treatment plans are communicated effectively.
• Perform Technology and Information Security risk assessments.
• Collaborate with Internal Audit on audits.

Requirements

• 1+ years’ experience in Information Security or Technology.
• Preferred certifications: CISSP, CISM, CISA.
• Experience in Vendor Security Risk Management.
• Experience in performing risk assessments.
• Knowledge of GRC tools.
• Highly analytical with presentation skills.
• Excellent written and verbal communication.
• Experience in supporting customer audits.
• Experience with software engineering teams in an agile environment.
• General understanding of Cloud technologies and compliance frameworks.

Benefits

• Collaborative and supportive work environment.
• Opportunities for professional development.
• Engagement in team-building activities.
• Recognition events and celebrations.
• Flexible work culture.