GRC Risk Analyst

Job Summary

A company is looking for a Sr. GRC Analyst.

Key Responsibilities:

• Assess and ensure compliance with requirements
• Collaborate with application owners to manage cybersecurity processes and application controls
• Conduct compliance assessments and control analysis

Required Qualifications:

• Strong background in risk analysis, consulting, internal auditing, or external auditing
• Thorough understanding of compliance frameworks such as ISO 27001, NIST 800-171, GDPR, TISAX, CMMC, and PCI
• Proficient in Microsoft Office, especially Excel (VLOOKUP)
• Basic technical skills, potentially at the level of an IT manager
• Certification is not required but preferred qualifications include Certified ScrumMaster (CSM) or Certified Information Systems Security Professional (CISSP)