IT Governance, Risk & Compliance Analyst I
Core
Support the development, implementation, and monitoring of IT policies, risk management processes, and compliance requirements for an IT Governance, Risk & Compliance team.
Role type
Junior IT GRC Analyst
Builds
IT control plans, audit evidence packages, and compliance reports
Domain
IT Governance, Risk & Compliance (Aerospace/Defense, Healthcare, Industrial)
Deliverable
dashboards & analysis
Required skills
Knowledge of security frameworks (NIST CSF, ISO/IEC 27001, CIS COBIT, CIS Controls), Risk Register management, Control testing execution, Policy drafting and review, Third-party risk assessment, Spreadsheet proficiency (Excel/Google Sheets), Basic cloud security concepts (AWS/Azure/GCP)
Preferred skills
CompTIA Security+ or CISA certification, Experience in technical support/help desk, Manufacturing environment experience, Basic enterprise IT architecture understanding
Responsibilities
Conduct internal security reviews and readiness assessments, Coordinate collection and quality review of audit evidence, Execute control tests and track stakeholder completion, Draft and update IT policies and procedures, Evaluate third-party vendor security posture, Identify and mitigate vulnerabilities
Seniority
Entry-level (1+ years experience preferred)
