Jobs → Data & Analytics → GRC Analyst

About the Role We are seeking a GRC Analyst to join our Global Information Security Office. This role involves executing international enterprise governance, risk management, and compliance programs. Key Responsibilities • Perform end-to-end security and compliance audits for ISO 27001, NIST, SOC 2 Type II, J-SOX, and data privacy rules (GDPR, HIPAA, FTC) • Execute security evaluations and assessments for third-party vendors and suppliers • Issue risk questionnaires and verify security controls • Align vendor risk with ISO, NIST CSF 2.0, NIST SP 800-53, etc. Requirements • 5+ years of experience performing full lifecycle compliance audits and certification management • 5+ years of experience executing third-party vendor security risk assessments • Strong working knowledge of core security frameworks and data protection standards