Job Description

Job Title: Governance, Risk, and Compliance (GRC) Analyst
Key Responsibilities:

• Governance
  Develop, maintain, and enforce IT security policies, standards, and procedures.
  • Support internal governance frameworks and ensure alignment with industry best practices.
  • Assist in the implementation of security awareness programs.
• Risk Management
  • Identify, assess, and monitor IT and business risks.
  • Conduct risk assessments and recommend mitigation strategies.
  • Maintain risk registers and track remediation efforts.
• Compliance
  • Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).
  • Coordinate internal and external audits and support audit readiness.
  • Monitor and report on compliance status and gaps.
• Control Implementation
  • Work with cross-functional teams to implement technical and administrative controls.
  • Evaluate the effectiveness of existing controls and recommend improvements.
• Reporting & Documentation
  • Prepare reports for management on risk posture, compliance status, and audit findings.
  • Maintain documentation related to policies, procedures, and compliance activities.

• Strong experience in GRC, IT audit, or cybersecurity.
• Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).
• Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).
• Excellent analytical, communication, and documentation skills.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.

Job Tags

Similar Jobs