ABOUT THE ROLE
We are seeking a proactive and detail-oriented Senior Cybersecurity GRC Analyst with expertise in Governance, Risk, and Compliance (GRC) and a strong emphasis on tool automation. The ideal candidate will have extensive experience in GRC tool automation, Identity Governance and Administration (IGA) implementation, and security compliance. Reporting directly to the Manager of Cybersecurity GRC, this position plays a key role in strengthening the tools and automation that support the company's governance, risk, and compliance programs. This role will focus on improving and optimizing the current security technology stack, including GRC tool automation, Identity Governance and Administration (IGA) implementation, phishing program effectiveness, and Trust Center management.
RESPONSIBILITIES
- Governance and Compliance:
- Partner with stakeholders to design, document, and enforce security policies, standards, and controls.
- Align the organization's security practices with frameworks such as NIST CSF, NIST SP800-53, PCI-DSS, and SOC 2.
- Automate the collection, validation, and continuous monitoring of control evidence from source systems and platforms, reducing manual evidence requests and keeping evidence current.
- Map controls once to multiple frameworks so that a single piece of automated evidence supports NIST CSF, PCI-DSS, SOC 2, and SOX requirements.
- Automate and present risk reports and dashboards for senior management, delivering actionable insights into organizational risk posture and compliance.
- Work closely with the corporate compliance team to handle cybersecurity questionnaires from clients.
- Improve and automate the process of handling client questionnaires related to cybersecurity.
- Act as a subject matter expert during client and regulatory discussions, providing expertise on GRC and risk management topics.
- Collaborate with platform owners and stakeholders to implement controls and security best practices.
Technology Enablement and Automation:
- Drive improvements to the current cybersecurity and GRC technology stack by identifying gaps, redun