Information Security GRC Analyst

Job Summary

A company is looking for an Information Security GRC Analyst to assess and prioritize information security risk across the organization.

Key Responsibilities

• Prepare for and manage functional compliance readiness and audits
• Maintain an up-to-date risk register and track remediation status
• Collaborate with various departments on GRC-related objectives

Required Qualifications, Training, and Education

• Knowledge and experience in risk management, audits (SOC 1, SOC 2, PCI DSS), and information security best practices
• Basic understanding of regulatory compliance and information security frameworks such as GDPR, CCPA, NIST, and CIS Controls
• Bachelor's degree in a related field or equivalent work experience
• At least 2 years' experience in governance and compliance-related roles
• Information security certifications such as CIPP, PMP, CISA, or CRISC are a plus