Senior GRC Analyst

Job Summary

A company is looking for a Senior GRC Analyst to perform cybersecurity governance functions and ensure compliance with relevant frameworks.

Key Responsibilities

• Review and revise existing documents, creating new security policies and standards
• Evaluate and implement the Enterprise Policy Management tool for cybersecurity policy management
• Develop and maintain an inventory of cybersecurity controls mapped to industry standards and regulatory requirements

Required Qualifications

• Bachelor's degree in Information Security, Information Technology, or related field
• 5+ years of experience in Information Technology or Information Security, with over 3 years in authoring security policies
• Strong understanding of cybersecurity controls and risk mitigation strategies
• Preferred security and compliance certifications such as CISSP, CISA, CISM, or CRISC
• Solid working knowledge of identity and access management, vulnerability management, and compliance assessments