Cybersecurity Governance, Risk & Compliance (GRC) Analyst
Core
Supports global cybersecurity governance, regulatory compliance, and audit readiness programs for utilities and cities.
Role type
Cybersecurity GRC Analyst
Builds
Security governance processes, internal controls, and compliance reporting aligned with regulatory frameworks.
Domain
Cybersecurity Governance, Risk & Compliance
Deliverable
dashboards & analysis
Required skills
Regulatory interpretation, compliance gap assessment, audit coordination, remediation tracking, documentation, written communication
Preferred skills
Multinational compliance program experience, GRC platform proficiency (Auditboard/Optro, Archer, ServiceNow), NIST/CIS/COBIT frameworks, Oracle administration, CISA/CISM/CRISC/CISSP certifications
Technologies
Auditboard, Optro, Archer, ServiceNow GRC, Oracle Cloud, Oracle On-prem
Responsibilities
Manage cybersecurity compliance across frameworks (SOX, ISO, NIS2, SOCI, Cyber Essentials); interpret regulations and translate into security controls; conduct gap assessments and maintain remediation plans; maintain compliance registers and evidence repositories; support internal and external audits; track audit findings and management action plans; provide guidance to stakeholders on governance requirements.
Seniority
Junior to Mid-level, hands-on IC
