GRC Analyst

Tasks

• Administer security and privacy awareness training
• Complete vendor security questionnaires
• Conduct data privacy impact assessments
• Coordinate audit evidence collection
• Design internal control testing
• Develop incident response plans
• Draft security policies and procedures
• Govern privacy operations
• Maintain customer trust center documentation
• Manage security compliance frameworks
• Partner with external auditors
• Perform third-party vendor risk assessments
• Process data subject access requests
• Support sales cycle with security posture
• Track control gaps and remediation

Perks/Benefits

• Flexible schedule
• Fully remote
• Work-life balance

Skills/Tech-stack

AWS | Access request | Awareness Training | Azure | CCPA | CCPA/CPRA) | CIPP/E | CIPP/US | CISA | CISM | Cloud Computing | Data Privacy | Data Subject Access Request | Data privacy impact assessment | GCP | GDPR | ISO 27001 | IT Audit | Impact Assessment | Incident Response | Incident Response Planning | Information security | Information security policies | Internal Controls | Netsuite | Privacy Impact Assessment | Response planning | Risk Management | SOC 2 | Security Awareness Training | Security Plus | Security awareness | Security policies | Subject access request | Third Party | Third-Party Risk | Vendor Risk | Vendor risk management