GRC Analyst

About the Team

The Analyst Governance, Risk, and Compliance is a member of the Information Security – Governance, Risk and Compliance (GRC) team. This role focuses on implementing and maintaining governance frameworks, managing risk remediation activities, and ensuring adherence to regulatory and internal security standards. The incumbent oversees requirements gathering and documentation for the Identity and Access Management (IAM) implementation, administers GRC-related inquiries from cross-functional business teams, and assists in the oversight and maintenance of policy and standards.

Responsibilities

• Act as a liaison between IT and business units to support the development and implementation of governance policies, standards, frameworks, and tools that align with organizational objectives.
• Support requirements gathering and documentation for InfoSec projects and programs, including proactively setting up and leading meetings to work through unclear requirements, workflows, and drive toward identification of solutions.
• Manage GRC ticket maintenance and provide guidance to stakeholders on GRC topics.
• Monitor and maintain risk remediation activities, ensuring compliance issues are addressed, risks are documented, and exceptions are tracked in accordance with established frameworks and standards.
• Provide guidance and training to stakeholders on governance, risk, and compliance topics to enhance awareness and improve adherence to processes.
• Engage constructively with business partners to address information security governance and compliance concerns, offering actionable recommendations for improvement.
• Assist with the development of security architecture and security policies, principles, and standards.
• Proactively research and stay up to date on the latest access security issues.
• Other duties as assigned.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Risk Management, or equivalent work experience preferred.
• Minimum 2 years of experience in Governance, Risk, and Compliance (GRC) or Information Security required.
• Experience conducting requirements gathering sessions and documentation, including data analysis preferred.
• Experience developing, documenting, and maintaining access and security policies, processes, procedures, and standards preferred.
• Strong organization, planning, and project management skills; ability to prioritize tasks for self and team to meet requirements and deadlines.
• Ability to work with different functional groups and levels of employees to effectively and professionally achieve results.
• Excellent written and verbal communication skills and ability to interact well with internal and external parties.
• Ability to work individually and in team settings with cross-functional teams.
• Strong computer skills, including Microsoft Office suite and Oracle.
• Knowledge of access, security, and risk assessment methods and technologies.
• Knowledge of Information Security Standards (ISO 27001/27002, ITIL, etc.).
• Knowledge of Data Privacy and Compliance Regulations (MA CMR 201, HIPAA, Red Flag, etc.).

About Us

American Tower is a global digital infrastructure company serving customers through tower sites and other real estate solutions that support connectivity and opportunity, focused on achieving our vision of Building a More Connected World. Our success is rooted in the potential of our people and the power of local teams at our offices and sites across 25 countries. We are one of the largest global Real Estate Investment Trusts (REITs) and a publicly traded (NYSE:AMT), Fortune 500 Company headquartered in Boston, Massachusetts.

The next decade will be an exciting time as we evolve our infrastructure to meet tomorrow’s needs and position our people to elevate their impact, their potential, and our shared success. Come grow your career with us!

Pay

For U.S.-based candidates, the base salary range for this position is provided. This position is also eligible for annual bonus, annual equity award, and participation in the Employee Stock Purchase Plan (ESPP). For candidates outside of the U.S., salary and benefits are based upon local market practice.

Benefits

• Comprehensive healthcare coverage.
• 401(k) savings plan.
• Paid time off, company holidays, sick leave, and parental leave.
• Access to an Employee Assistance Program focused on mental and financial wellness.