Senior Analyst, GRC

About the role

Responsible for effective management of information security and resilience risks through domain expertise in areas such as regulatory compliance, risk management, security data engineering, or organizational resilience. This position develops and enforces information security policies, performs advanced risk assessments, and ensures alignment with regulatory requirements. Uses data driven decision making to protect assets by identifying vulnerabilities, measuring risks, improving resilience, and promoting compliance through security awareness.

Responsibilities

• Contribute to the implementation of an integrated Governance, Risk, and Compliance (GRC) program and tools to support GRC workflows, which align with organizational objectives and regulatory requirements.
• Develop and enforce enterprise-wide information security policies, standards, and procedures to support robust information security and operational resilience, including processes to manage exceptions to policies and standards.
• Perform risk assessments, including business impact assessments, third party risk assessments, and assessments of cloud systems.
• Synthesize data to inform senior leadership on security posture, resilience gaps, and emerging threats.
• Contribute to the prioritization and deployment