Security Governance Analyst - GRC
Core
Designing, implementing, and monitoring security governance frameworks, conducting risk assessments, and ensuring compliance with internal policies, industry standards, and applicable laws.
Role type
Security Governance Analyst (GRC)
Builds
Enterprise governance frameworks, risk assessment reports, and compliance documentation
Domain
Information Security / Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Risk assessment, control evaluation, regulatory compliance analysis, audit coordination, access governance, gap analysis, reporting
Preferred skills
CRISC, CISSP, CCSP
Technologies
N/A
Responsibilities
Lead enterprise and third-party risk assessments of moderate to high complexity; Conduct detailed evaluations of governance, privacy, and access controls; Assess systems and vendors for regulatory and contractual compliance impact; Coordinate audit support activities and validate remediation evidence; Perform and review access governance processes and control testing; Develop comprehensive governance reporting insights; Provide structured guidance and quality review support to governance analysts
Seniority
Mid-level, independent execution
