Senior Technology Risk Analyst
Core
Manage and continuously improve the Information Security Management System (ISMS) and security governance for Data & Technology Solutions.
Role type
Senior IC Governance, Risk, and Compliance (GRC) Analyst
Builds
Operational security governance frameworks, risk registers, and compliance evidence for a global media and technology solutions company
Domain
Information Security, Risk Management, Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
ISMS operation, ISO 27001 management, risk register maintenance, policy lifecycle management, control assurance, audit readiness, stakeholder engagement, technical writing
Preferred skills
SOC 2, GDPR, HIPAA familiarity, cloud security, SaaS platforms, risk committee operation
Technologies
ISO 27001, SOC 2, GDPR, HIPAA
Responsibilities
Manage day-to-day ISMS operation and continuous improvement; Own policy lifecycle and control governance; Operate the Risk Review Board; Maintain central risk register; Support control assurance and evidence management; Assist with compliance obligations and audit readiness; Manage exception and waiver processes; Support third-party risk assessment; Produce governance reporting
Seniority
Senior, hands-on IC