GRC Analyst (Governance) - Global Industrial
Core
Executes day-to-day Governance, Risk & Compliance activities including vulnerability management, security policy development, privacy program operations, and risk assessment support.
Role type
GRC Analyst II (Governance, Risk & Compliance)
Builds
Security policies, compliance reports, privacy notices, and risk registers
Domain
Information Security / Cybersecurity / Privacy
Deliverable
dashboards & analysis
Required skills
Vulnerability management, policy development, privacy program operations, risk assessment, audit support, DSAR processing, stakeholder collaboration
Preferred skills
GRC tooling familiarity, specific framework experience, relevant certifications
Technologies
Vulnerability scanning tools, GRC platforms
Responsibilities
Monitor vulnerability scanning results and maintain external attack surface visibility; Develop and maintain information security policies and standards; Manage privacy notices, cookie compliance, and consent management; Support privacy program operations including PIAs and DSARs; Execute IT and third-party/vendor risk assessments; Maintain cyber risk register and track remediation lifecycle; Produce compliance metrics and reporting data.
Seniority
Mid-level, hands-on IC
