GRC Security Analyst - Information Security
Core
Manage governance, risk, and compliance (GRC) operations, including vendor risk, regulatory compliance, audit support, and security policy enforcement.
Role type
GRC Security Analyst
Builds
Security governance initiatives, compliance frameworks, and risk mitigation plans
Domain
Information Security / GRC / Compliance
Deliverable
dashboards & analysis
Required skills
GRC operations, vendor risk management, regulatory compliance, audit support, risk assessment, corrective action planning, policy management, business continuity monitoring, acquisition integration support
Preferred skills
Cloud security tools (AWS, Azure, GCP), CISA/CISSP certification
Technologies
ISO 27001, SOC 2, GDPR, CIS frameworks
Responsibilities
Coordinate security governance goals and initiatives; support sales channels with security assessments and audits; conduct vendor risk management assessments; support regulatory compliance initiatives (ISO 27001, SOC2, GDPR); identify and track security policy non-conformities; assess and track security risks and mitigation plans; monitor audit and risk assessment findings; monitor business continuity and disaster recovery testing; perform periodic compliance checks; support integration plans for acquisitions; update security policies and processes; participate in security awareness campaigns.
Seniority
Mid-level, hands-on IC
