Lead GRC Risk Analyst

Job Summary

A company is looking for a Lead GRC Risk Analyst - Security Awareness (Remote).

Key Responsibilities

• Facilitate discussions on risk identification and mitigation, recommending operational changes
• Support vendor risk assessments and the completion of third-party security questionnaires
• Develop reporting metrics and participate in due diligence activities for mergers and acquisitions

Required Qualifications

• A minimum of four years' experience in Information Security, Technology, or IT Risk
• Associate degree with at least five years of IT-related experience, or a Bachelor's degree with three years of experience, or a Master's degree in Information Security or IT
• Preferred certifications include CISSP, CISM, CISA, and CRISC
• Advanced knowledge of IT Governance, Risk Management, and Compliance concepts
• Experience with third-party vendor risk management tools and phishing simulation tools