Governance, Risk & Compliance Analyst
Core
Support monitoring, reporting, and mitigation of data security and privacy risks; develop policies and consult on risk solutions.
Role type
GRC Analyst (Information Security)
Builds
Data security and privacy risk controls, policies, and third-party risk assessments
Domain
Retail / Information Security / Privacy
Required skills
Third-party risk assessment, Cloud risk assessment, GRC platform management, Privacy Impact Assessments, Data Subject Access Request coordination, Regulatory compliance (GDPR, CCPA, SOC 2, ISO, NIST, PCI, SOX)
Preferred skills
Cloud computing, Data discovery and mapping, Access management, Pseudonymization technologies
Technologies
OneTrust, ServiceNow, Jira
Responsibilities
Develop and maintain security and privacy policies and procedures; Collaborate with stakeholders to ensure adherence to industry best practices; Support third-party risk assessment and vendor oversight; Liaise with internal and external auditors; Conduct Privacy Impact Assessments; Coordinate Data Subject Access Requests; Maintain oversight in a GRC-related platform.
Seniority
Mid-level, hands-on IC
