Governance, Risk, and Compliance (GRC) Analyst

Key Responsibilities: Governance Develop, maintain, and enforce IT security policies, standards, and procedures. Support internal governance frameworks and ensure alignment with industry best practices. Assist in the implementation of security awareness programs.

Risk Management: Identify, assess, and monitor IT and business risks. Conduct risk assessments and recommend mitigation strategies. Maintain risk registers and track remediation efforts.

Compliance: Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).Coordinate internal and external audits and support audit readiness. Monitor and report on compliance status and gaps.

Control Implementation: Work with cross-functional teams to implement technical and administrative controls. Evaluate the effectiveness of existing controls and recommend improvements.

Reporting & Documentation: Prepare reports for management on risk posture, compliance status, and audit findings. Maintain documentation related to policies, procedures, and compliance activities.

Required Skills & Qualifications: Strong experience in GRC, IT audit, or cybersecurity. Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).Excellent analytical, communication, and documentation skills. Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.