Lead GRC Analyst

View full description

Requirements:

• BS degree from an accredited institution in Information Security, Risk Management, Business Administration, or related field.
• 5+ years of experience in GRC, risk management, or related fields with leadership experience.
• Preferred certifications: CISSP, CISA, CISM or CRISC.
• Strong knowledge of regulatory requirements like GDPR, HIPAA, and PCI-DSS.
• Expertise in security solutions and GRC frameworks.
• Proficiency in cloud-based solutions and web technologies.

Responsibilities:

• Develop and implement GRC strategies, policies, and procedures to ensure compliance.
• Lead risk assessments and identify gaps, creating mitigation plans.
• Collaborate with teams to integrate GRC principles into processes.
• Monitor regulatory changes to maintain compliance.
• Provide guidance and training on GRC policies.
• Oversee audits and compliance activities.
• Act as liaison with external auditors and stakeholders.
• Develop and maintain KPIs for GRC initiatives.
• Mentor GRC analysts and support information security programs.