Senior Information Security Governance, Risk & Compliance Analyst

About the role

The Senior Information Security Governance, Risk & Compliance Analyst is a seasoned individual contributor responsible for supporting enterprise governance, risk, compliance, access governance, SAP GRC, SOX ITGC, and assurance activities. This second-line role provides independent oversight, monitoring, reporting, and control assurance to strengthen information security, technology compliance, and risk management capabilities.

Responsibilities

• Access Governance & Segregation of Duties: Coordinate and support enterprise Segregation of Duties governance across SAP and other key enterprise platforms.
• Administer SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management.
• Maintain SoD rulesets, risk functions, mitigating controls, access governance documentation, and related control evidence.
• Assess access risks, including SoD conflicts, excessive entitlements, privileged access exposure, and control effectiveness concerns.
• Monitor access-related exceptions, remediation plans, compensating controls, metrics, and trends to support risk reduction and compliance obligations.
• User Access Review & Privileged Access Governance: Coordinate and manage periodic User Access Reviews and access certification activities.
• Monitor completion rates, overdue certifications, and non-compliance issues in accordance with governance requirements.
• Support oversight of privileged access, emergency access, Firefighter governance, and related monitoring activities.
• Review privileged access activity and maintain evidence supporting user access governance controls.
• SOX ITGC Compliance & Control Monitoring: Administer and support SAP GRC Process Control activities used to monitor, assess, and validate SOX IT General Controls and security compliance requirements.
• Support SOX ITGC compliance execution, control monitoring, audit evidence collection, validation, retention, and reporting.
• Audit & Assurance Support: Support internal audits, external audits, and regulatory assessments by coordinating evidence, documentation, walkthroughs, and audit responses.
• Maintain audit-ready documentation repositories and supporting records.
• Monitor remediation activities and validate completion of corrective actions.
• Perform control assurance activities by reviewing evidence completeness, control execution, and remediation effectiveness.
• Governance & Compliance Operations: Support the development, implementation, and maintenance of information security policies, standards, procedures, governance processes, and control frameworks.
• Support control inventory management, exception management, compliance reporting, GRC tool administration, workflows, dashboards, and reporting capabilities.
• Risk Management Support: Assess cybersecurity, technology, artificial intelligence, data protection, and operational risks through structured risk assessment and governance processes.
• Facilitate information security risk assessments supporting governance, compliance, and enterprise risk management activities.
• Maintain risk registers, treatment plans, issue logs, action tracking, KRIs, risk dashboards, and management reporting.
• Stakeholder Collaboration & Advisory Support: Partner with Information Security, Information Technology, Finance, Privacy, Internal Audit, Legal, Enterprise Risk Management, and business stakeholders.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Systems, Risk Management, Business Administration, Accounting, Finance, Audit, or a related discipline, or equivalent combination of education and experience.
• Minimum 7 years of experience in Information Security GRC, Information Security Risk Management, SOX ITGC Compliance, Internal Audit, External Audit, Access Governance, Identity Governance, SAP Security Governance, Compliance Management, or Internal Controls Management.
• Advanced knowledge of Information Security GRC, access governance, regulatory compliance, risk management, and internal controls.
• Strong understanding of SAP GRC Access Control and SAP GRC Process Control administration.
• Current SAP Certified Application Associate, SAP Access Control certification required.
• Current SAP GRC Process Control certification required.

Preferred Qualifications

• Hands-on experience administering SAP GRC capabilities supporting SoD, UAR, EAM, SOX ITGC, continuous control monitoring, compliance reporting, and audit evidence management.
• Experience administering SAP GRC Access Risk Analysis, Access Request Management, Emergency Access Management, Business Role Management, and SAP GRC Process Control.
• Experience maintaining SoD rulesets, mitigating controls, access-risk libraries, access review campaigns, compliance dashboards, and audit evidence repositories.
• Experience supporting SOX ITGC testing, walkthroughs, evidence requests, remediation tracking, and audit readiness activities.
• Working knowledge of SAP authorization concepts, including roles, profiles, transaction codes, and role-based access controls.
• Strong analytical, documentation, reporting, stakeholder management, and business communication skills.
• SAP GRC Risk Management Certification or experience administering SAP GRC Risk Management solutions.
• Professional certifications such as CISA, CRISC, CIA, CISM, CISSP, GRCP, or CPA.

Benefits

MiniMed offers a competitive salary and flexible benefits package. We recognize their contributions, share in the success they help create, and offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every stage of your career and life.

• Health, dental, and vision insurance
• Access to a Health Savings Account, Healthcare Flexible Spending Account
• Life insurance, long-term disability leave, and a dependent daycare spending account
• Incentive plans, a 401(k) plan with company match, short-term disability coverage, paid time off and holidays
• Participation in our Employee Stock Purchase Plan, and access to our Employee Assistance Program

Pay

Salary ranges for U.S (excl. PR) locations (USD): $128,800.00 - $193,200.00. For roles located in California, Seattle WA, Washington DC, Boston MA, and New York City, the salary range is $121,000.00- $205,000.00 USD.