Governance, Risk, and Compliance (GRC) Analyst

Job Title: Governance, Risk, and Compliance (GRC) Analyst

Key Responsibilities:

• Governance

Develop, maintain, and enforce IT security policies, standards, and procedures.

• Support internal governance frameworks and ensure alignment with industry best practices.

• Assist in the implementation of security awareness programs.

• Risk Management

• Identify, assess, and monitor IT and business risks.

• Conduct risk assessments and recommend mitigation strategies.

• Maintain risk registers and track remediation efforts.

• Compliance

• Ensure compliance with regulatory requirements (e.g., GDPR, HIPAA, ISO 27001, SOX).

• Coordinate internal and external audits and support audit readiness.

• Monitor and report on compliance status and gaps.

• Control Implementation

• Work with cross-functional teams to implement technical and administrative controls.

• Evaluate the effectiveness of existing controls and recommend improvements.

• Reporting & Documentation

• Prepare reports for management on risk posture, compliance status, and audit findings.

• Maintain documentation related to policies, procedures, and compliance activities.

Required Skills & Qualifications:

• Strong experience in GRC, IT audit, or cybersecurity.
• Strong understanding of regulatory frameworks and standards (e.g., NIST, ISO, COBIT).
• Experience with GRC tools (e.g., RSA Archer, ServiceNow GRC, MetricStream).
• Excellent analytical, communication, and documentation skills.
• Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer are a plus.