Information Security GRC – Risk & Compliance Senior Analyst (Contract)

About the role

The Information Security Governance, Risk & Compliance Senior Analyst (Risk & Compliance) is a full-time, contract position located in Southfield, MI. Reporting to the Information Security Governance, Risk, & Compliance Manager, this role is part of the Information Security team.

Responsibilities

• Support the CISO in the completion of the annual risk assessment required to support client and compliance audits, as well as periodic risk assessments as determined
• Manage the review and analysis of risk register ensuring accuracy, completeness, and timely updates
• Conduct risk assessments including evaluation of risk and control effectiveness
• Track remediation actions to closure with assigned control owners, maintain due dates, escalate overdue items, and report status to leadership
• Interview subject matter experts and gather information for conducting risk assessments
• Collaborate with cross-functional teams to develop risk mitigation strategies
• Conduct security assessments of third-party suppliers, including review of security questionnaires, supporting documentation, and independent audit reports
• Identify third-party supplier gaps, risk ratings, and required mitigations
• Design, execute, and monitor control tests to assess compliance with contractual, regulatory, and internal requirements
• Partner with control owners across IT and business functions; ensure roles and responsibilities are clearly communicated and understood
• Prepare audit request materials and upload documentation for internal or external auditors
• Measure and report metrics to IS GRC Risk & Compliance Manager, IS GRC Director and CISO
• Improve security efficiency, streamline, and automate work processes while working collaboratively with other team members and IT staff to accomplish objectives

Requirements

MUST BE CURRENTLY AUTHORIZED TO WORK IN THE UNITED STATES. NO VISA OR IMMIGRATION SPONSORSHIP FOR THIS ROLE, NOW OR IN THE FUTURE. (e.g., H-1B, STEM OPT, TN, etc.)