GRC Analyst
Core
Manage cybersecurity risk management framework and third-party risk program to ensure alignment with policies and standards.
Role type
GRC Analyst
Builds
Risk registers, vendor risk assessments, issue/exception tracking, and compliance reports.
Domain
Cybersecurity / Governance, Risk, and Compliance
Deliverable
dashboards & analysis
Required skills
Security risk assessment, vendor security reviews, compliance standards implementation (ISO27001, SOC2, PCI-DSS), risk register management, issue triage, policy exception analysis
Preferred skills
GRC tools (OneTrust), Jira, SharePoint, Confluence, CISSP, CISA, CRISC, CIPP certifications
Technologies
Delinea GRC solution, OneTrust, Jira, SharePoint, Confluence
Responsibilities
Assess cybersecurity risk and maturity; maintain risk register and coordinate remediation; monitor and report key risk indicators; verify control effectiveness with Assurance Team; assess vendor security risks and document findings; manage cybersecurity issue intake and remediation tracking; manage policy exceptions and risk acceptances; analyze trends to identify control gaps.
Seniority
Mid-level, hands-on IC