Senior GRC Analyst
Core
Lead day-to-day execution of the Governance, Risk, and Compliance (GRC) program, focusing on cybersecurity and AI risk assessments, exceptions management, and SDLC reviews.
Role type
Senior GRC Analyst (Cybersecurity & Risk)
Builds
Enterprise cyber risk registers, risk mitigation plans, executive risk reports, and dashboards for leadership visibility.
Domain
Cybersecurity, Enterprise Risk Management, AI Governance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure | physical/clinical work
Required skills
Cybersecurity risk assessment, IT risk management, Risk register maintenance, Security frameworks (NIST CSF, ISO 27001, PCI DSS), Regulatory compliance (GDPR, HIPAA), AI/ML risk evaluation, FAIR analysis, Technical-to-business translation
Preferred skills
Professional certifications (CRISC, CISSP, CISA, CGRC), AI governance frameworks (NIST AI RMF, ISO/IEC 42001)
Technologies
NIST CSF, ISO 27001, PCI DSS, GDPR, HIPAA, NIST AI RMF, ISO/IEC 42001, FAIR
Responsibilities
Lead cyber, AI, and technology risk assessments across systems and cloud environments; Maintain and operate the enterprise cyber risk register; Translate technical findings into clear business risk scenarios; Support quantitative cyber risk analysis approaches like FAIR; Prepare materials for the Cyber Risk Committee and executive reporting; Partner with Security Architecture to assess risk in system designs and cloud architecture; Collaborate with cross-functional teams to evaluate new initiatives and third-party integrations; Conduct risk assessments for emerging technologies including AI and ML systems; Develop dashboards for leadership visibility into cybersecurity risks.
Seniority
Senior, hands-on IC
