Global Information Risk & Governance Analyst
Core
Manage end-to-end risk management program and policy lifecycle, leading risk assessments and governing security risk identification, assessment, and response.
Role type
Individual contributor Information Risk & Governance Analyst
Builds
Risk remediation plans, risk assessments, security policies, and compliance frameworks
Domain
Information Security / Governance, Risk, and Compliance (GRC)
Deliverable
dashboards & analysis
Required skills
Risk management, issue management, information security, GRC practices, formal risk rating methodology, regulatory compliance monitoring, policy exception management, KRI/KPI monitoring
Preferred skills
NIST Cybersecurity Framework familiarity, executive-level presentation skills, project management
Technologies
GRC reporting systems
Responsibilities
Partner with risk owners to document, assign, and track risk remediation plans; Apply formal risk rating methodology for consistent prioritization; Embed risk management services in assigned business areas; Deliver comprehensive analysis of risk data to generate actionable insights; Drive process optimization for continuous improvement; Develop and implement processes to ensure organizational compliance; Operate the Policy Exception Management Process; Execute policy attestation and investigate non-compliance; Maintain and monitor KRI/KPIs for executive reporting.