Cybersecurity GRC (Governance, Risk & Compliance) Analyst

Tasks

• Align security controls with regulatory requirements
• Collect audit evidence and perform walkthroughs
• Conduct control gap assessments
• Coordinate internal and external audits
• Develop and maintain information security policies
• Maintain documentation for policies risk and controls
• Maintain risk register
• Manage third-party vendor risk
• Monitor compliance posture
• Perform control testing and continuous monitoring
• Perform risk assessments
• Support compliance reporting and dashboards
• Support compliance with PCI DSS SOC 2 and GDPR
• Support remediation planning
• Track and report risk treatment progress

Perks/Benefits

• Birthday day off
• Employee interest groups
• Flexible work arrangement
• Group life insurance
• Health insurance
• Low-interest loans
• Paid parental leave
• Paid time off
• Sponsored training
• Therapy sessions

Skills/Tech-stack

Audit evidence | CIS Controls | Compliance reporting | Continuous Monitoring | Control Testing | GDPR | GRC tools | Governance Risk | Governance risk compliance | ISO 27001 | Information security | Information security policies | NIST CSF | PCI DSS | Remediation planning | Risk Assessment | Risk Management | Risk compliance | Risk register | SOC 2 | Security policies | Third Party | Third-Party Risk | Third-party risk management