Senior Security Analyst (GRC)
Core
Partner with Technology & Data teams to strengthen cyber resilience, ensure security controls align with ISO/IEC 27001 and regulatory obligations, and lead technology risk governance & advisory.
Role type
Senior GRC Security Analyst
Builds
Security controls library, risk assessments, assurance activities, and remediation plans
Domain
Energy sector cybersecurity governance, risk, and compliance
Required skills
ISO/IEC 27001-aligned controls frameworks, risk assessments, assurance activities, remediation management, GRC platforms, controls library administration, stakeholder engagement, translating technical security concepts to business risks
Preferred skills
Technology risk management lifecycle, facilitating stakeholder discussions, actionable reporting to business leaders
Technologies
GRC platforms
Responsibilities
Assess control maturity and address gaps, lead technology risk governance discussions, drive security awareness and change enablement, build and administer controls library, influence decision-making for security posture
Seniority
Senior, hands-on IC