Description
Job Title: Governance, Risk, and Compliance (GRC) Analyst
Key Responsibilities:
GovernanceDevelop, maintain, and enforce IT security policies, standards, and procedures.
Support internal governance frameworks and ensure alignment with industry best practices.
Assist in the implementation of security awareness programs.
Risk Management
Identify, assess, and monitor IT and business risks.
Conduct risk assessments and recommend mitigation strategies.
Maintain risk registers and track remediation efforts.
Compliance
Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).
Coordinate internal and external audits and support audit readiness.
Monitor and report on compliance status and gaps.
Control Implementation
Work with cross-functional teams to implement technical and administrative controls.
Evaluate the effectiveness of existing controls and recommend improvements.
Reporting & Documentation
Prepare reports for management on risk posture, compliance status, and audit findings.
Maintain documentation related to policies, procedures, and compliance activities.
Required Skills & Qualifications:
Strong experience in GRC, IT audit, or cybersecurity.Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).Excellent analytical, communication, and documentation skills.Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.
Skills:
Analysis Skills, Best Practices, CISA - Certified Information Systems Auditor, CISSP - Certified Information Systems Security Professional, Communication Skills, Computer Security, Control Objectives for Information and related Technology (COBIT), Cross-Functional, Documentation, External Audit, HIPAA (Health Insurance Portability and Accountability Act), ISO (International Organization for Standardization), Information Technology/Systems Audit, Internal Audit, Internet Security, Maintain Compliance, Regulations, Regulatory Compliance, Regulatory Requirements, Reporting Skills, Risk, Risk Analysis, Risk Management, Sarbanes-Oxley Act (SOX), ServiceNow, U.S. National Institute of Standards and Technology (NIST)
PROLIM Global Corporation