Senior GRC Analyst
New
P
PrizePicksSports Technology
Open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidatesFull-TimeSenior
Salary$110,000 to $120,000
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years
- Required Skills
- Project Management
Requirements
- 5+ years of experience in GRC, Information Security, IT Audit, or related fields.
- Experience independently managing audits, compliance initiatives, or governance programs.
- Proficiency with security and compliance frameworks such as SOC 2, ISO 27001, SOX 404, PCI-DSS, NIST, GDPR, or CIS.
- Hands-on experience conducting Third-Party Risk Management (TPRM) assessments.
- Experience developing security policies, standards, and procedures.
- Proficiency with GRC platforms for managing compliance activities, risk registers, and workflow automation.
- Experience identifying, documenting, and communicating security and compliance risks to various stakeholders.
- Knowledge of SSDLC and IT operations impact on GRC.
- Experience supporting privacy and data protection initiatives such as CCPA.
- Strong project management, written, and verbal communication skills.
Responsibilities
- Manage the ongoing review and maintenance of organizational security policies, standards, and procedures.
- Coordinate with Legal, Regulatory Affairs, and Internal Audit to design and maintain a unified governance roadmap.
- Lead security risk assessments for new and renewing third-party vendors.
- Coordinate and support annual security audits and certifications, including evidence collection and stakeholder communication.
- Assist with the administration and improvement of the company’s security awareness and training program.
- Interpret new and changing compliance requirements and ensure technology alignment.
- Administer and improve the organization’s GRC platform and related workflows.
- Maintain and evolve risk and issues registries to track remediation and exceptions.
View Full Description & ApplyYou'll be redirected to the employer's site
