Operational GRC & Risk Analyst

We are seeking a motivated, process-oriented professional to join our global GRC and operational cybersecurity team. This is a multifaceted role, combining elements of operational information security, IT general controls (ITGC) oversight, and risk management. You will be mentored and guided by senior professionals in each of the functional areas, with the opportunity to gain broad exposure to global systems, processes, and governance structures.
Responsibilities:
Strong understanding of Cyber security frameworks and standards: In-depth knowledge of widely recognized frameworks such as NIST Cybersecurity Framework, ISO 27001, and SOC 2 TYPE 2, and an ability to apply them in practical scenarios to develop and implement robust security programs Comprehensive knowledge of regulatory compliance requirements: Up-to-date understanding of relevant data protection and privacy regulations. The ability to interpret these requirements and translate them into actionable organizational policies and controls is crucial. Experience with GRC tools and technologies: Practical experience utilizing GRC platforms and tools to automate and streamline compliance processes, manage audits, and track risk posture. Familiarity with reporting and dashboarding functionalities to provide insights into the organization's GRC maturity is also highly valued. Expertise in third-party risk management and supply chain security: Proven ability to manage, conduct, and oversee the security posture of critical vendors and third-party service providers. This includes developing and implementing vendor risk assessment frameworks, conducting security due diligence, and ensuring contractual security requirements are met to protect the supply chain. Proficiency in Cyber security posture monitoring and control: Strong understanding of continuous monitoring strategies and technological controls to maintain and improve the organization's Cyber security posture.