Jobs → Data & Analytics → GRC Analyst

About the Role We are seeking a GRC Analyst to join our Global Information Security Office. This role involves executing international enterprise governance, risk management, and compliance programs. Key Responsibilities • Perform end-to-end security and compliance audits and maintain adherence to security certifications • Execute end-to-end security evaluations and assessments for third-party vendors and suppliers • Issue risk questionnaires and verify security controls • Align vendor risk with ISO, NIST CSF 2.0, NIST SP 800-53, etc. Requirements • Hands-on experience performing full lifecycle compliance audits and certification management across ISO 27001, SOC 2 Type II, Data Privacy and internal control frameworks (J-SOX) • Experience executing third-party vendor security risk assessments and managing supplier risk workflows • Strong working knowledge of core security frameworks and data protection standards (ISO 27001, NIST CSF, GDPR, HIPAA)