Senior Governance, Risk, and Compliance (GRC) Process Analyst

Senior Governance, Risk, and Compliance (GRC) Process Analyst – Boeing positions located in Mesa, AZ; Dallas, TX; Colorado Springs, CO; Fort Walton Beach, FL; Jacksonville, FL; Miami, FL; North Charleston, SC; Ridley Park, PA; Portland, OR; Salt Lake City, UT; San Antonio, TX; Seal Beach, CA; Seattle, WA; or Berkeley, MO. Responsibilities Support the organization’s GRC framework, policies, standards, and procedures. Conduct risk assessments and maintain enterprise risk registers. Identify, assess, and track remediation of technology and cybersecurity risks. Assist in third‑party/vendor risk assessments and compliance reviews. Monitor compliance with internal policies and regulatory requirements. Support ITGC (IT General Controls) and SOX compliance activities. Coordinate control testing, evidence collection, and remediation tracking. Work with control owners to ensure design effectiveness and operational effectiveness of SOX controls. Assist during external and internal SOX audits. Maintain documentation for SOX controls, narratives, and process flows. Coordinate vulnerability management activities with infrastructure teams and track remediation of identified vulnerabilities and security findings. Support periodic access reviews and security compliance assessments. Act as liaison between IT/Security teams and internal/external auditors. Prepare audit evidence and coordinate audit requests. Track audit findings and remediation plans through closure. Assist with audit readiness initiatives and continuous monitoring activities. Develop dashboards, metrics, and compliance reports for management. Maintain accurate documentation for risks, controls, findings, and remediation efforts. Support policy and procedure reviews and updates. Support automation for SOX controls by identifying scope and recommending options for automation. Direct activities to define, deploy, evaluate and support common computing standards, IT processes, tools, and process/performance metrics. Lead activities to define plans and support common standards and processes. Identify qualitative and quantitative improvement measures. Advise on selection of key parameters and standards to monitor progress. Lead the definition, development and deployment of common process requirements and infrastructure products and services. Educate and promote use of Boeing IT common processes, methodologies, products and services. Consult and coach in common processes for software development and maintenance. Lead review and evaluation of new technology for software process impact. Support and integrate architecture mapping to common processes. Qualifications 5+ years of experience in Governance, Risk, and Compliance (GRC), Information Technology (IT) Audit, Information Security, vulnerability management, and Compliance. 5+ years of SOX ITGC, Security Controls, Vulnerability Management processes, Audit lifecycle, and compliance practices. 3+ years of experience with GRC tools such as ServiceNow GRC, Audit Board, and CAIRO. 3+ years with infrastructure experience including network, database, operating systems, IAM, change management, and periodic reconciliations. 3+ years of industry security standards experience such as NIST, ISO 27001, COBIT, and OWASP. 3+ years in risk management and root‑cause corrective analysis. 5+ years managing multiple competing priorities. 5+ years of experience in consulting or a strategic role that influences the business. Excellent communication and presentation skills. Preferred Qualifications 10+ years of related work experience or an equivalent combination of education and experience. 10+ years in GRC, IT Audit, Information Security, vulnerability management, and Compliance. 10+ years in SOX ITGC, Risk Management methodologies, Security Controls, Vulnerability Management processes, Audit lifecycle, and compliance practices. 5+ years’ experience with GRC tools such as ServiceNow GRC, Audit Board, and CAIRO. 5+ years of infrastructure experience including network, database, operating systems, IAM, change management, and periodic reconciliations. 5+ years of industry security standards experience such as NIST, ISO 27001, COBIT, and OWASP. 5+ years in risk management and root‑cause corrective analysis. Pay & Benefits Pay range: Sr Level 4 – $117,900 to $160,000; Sr. Level 5 – $146,700 to $198,000. Competitive base pay and variable compensation opportunities. Health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance. Paid and unpaid time away from work. Other Information Security Clearance: Not required. Visa Sponsorship: Employer will not sponsor. Relocation assistance: Not a negotiable benefit. Export Control Requirement: Position must meet U.S. export control compliance; a “U.S. Person” is required. Shift: Shift 1 (United States of America). Safety Sensitive: This is not a Safety Sensitive Position. Contingent Upon Award Program: This position is not contingent upon program award. Shift: Shift 1 (United States of America). EEO Statement Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law. EEO is the law. #J-18808-Ljbffr Boeing