GRC Analyst

Description

As a GRC analyst, you will be working very closely to participate in all aspects of cyber security and compliance. The role is a crucial part in our Cyber Security team and the entire security program. We are looking for a team member with experience in compliance frameworks operating with modern systems. You will be involved in all information security processes and activities, with the different teams, make risk mitigation recommendations, and suggest and review solutions. This is a key position in the process of building the security culture in the entire organization.

The ideal candidate is highly motivated, demonstrating a ‘can do' attitude and needs to have a combination of troubleshooting and communication skills, as well as the ability to handle a mix of multiple tasks in parallel.

This role will provide career growth opportunities as you develop/acquire new security skills in the course of your duties.

RESPONSIBILITIES:

• Support local, regional, and global initiatives and activities related to governance, risk, and compliance.
• Establish, maintain, and publish up-to-date security and compliance policies, standards, and guidelines, and oversee training and dissemination of policies and procedures.
• Identify and track timely closure of control gaps and risk mitigation plans.
• Participate in ISO 27001, SOC, and other compliance assessment, evidence collection, and reporting.
• Develop and implement various Governance, Risk, and Compliance tools.
• Utilize a risk-based approach for vendor management, including assessing and treating the risks.
• Assist with Incident Response and Business Continuity to include running table-top exercises.
• Other related duties such as Incident response process, Vulnerabilities management and more.
  
  

• A minimum of 3 years of professional experience including 2+ years in Audit, risk management, IT security, and/or similar compliance functions.
• Strong understanding of security and control standards and frameworks such as ISO27001, SOC, and PCI - their use and assessment.
• Knowledge of IT systems security concepts, trends, and practices.
• Expertise in IT security assessments.
• Work in a highly dynamic and productive environment.
• Advanced interpersonal and communication skills.
• Self-starter and quick learner
• Highly organized and detail-orientated to ensure accuracy and quality in work responsibilities.