GRC Analyst

Job Summary

A company is looking for a GRC Analyst to ensure alignment with cybersecurity policies and risk management frameworks.

Key Responsibilities

• Lead cybersecurity risk assessments and develop risk mitigation strategies
• Conduct control readiness assessments and vendor security risk reviews
• Maintain the centralized risk register and cybersecurity policies, and prepare compliance reports

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Business Administration, or a related field
• 7+ years of relevant work experience in cybersecurity or technology programs
• Solid understanding of compliance standards such as ISO27xxx, SOC2, and PCI-DSS
• Practical experience in security/privacy risk assessments and vendor security reviews
• Strong time management and organizational skills