Governance Risk & Compliance (GRC) Analyst in Lakewood,

Job Opportunity

The role is a member of the Governance, Risk & Compliance function within the Global Information Security Office and supports the implementation of company-wide security governance, risk management, and compliance programs. Under the direction of the GRC Functional Leader, the analyst contributes to policy development, risk oversight, and continuous improvement of the organization's security posture. The role also works closely with regional Information Security Officers (ISOs) and cross-functional teams to support the deployment of global standards and local regulatory requirements.

Required Skills & Qualifications

• Information security, governance, risk management, compliance, IT audit, or a related discipline, Governance Risk & Compliance (GRC) - 8-10 years of experience.
• NIS2 Directives & ISO/IEC 27001 5-10 years of experience.
• Vendor risk management experience.
• CISSP most valued or others like (CISA, CISM, ISO-related).
• Prior work experience in a client's industry.
• Applicants must be able to work directly for Artech on W2.

Preferred Skills & Qualifications

• Experience with governance, risk, and compliance tools (e.g., BitSight, Drata, OneTrust, Archer, or similar).
• Working knowledge of cybersecurity concepts such as identity and access management, endpoint protection, vulnerability management, cloud security, and secure system design.
• Experience supporting cross-functional security or compliance initiatives.
• Ability to interpret risk metrics, compliance data, and audit results.
• Awareness of emerging cybersecurity regulations.
• Comfort working with global teams across different regions, time zones, and cultural contexts.

Day-to-Day Responsibilities

• Support information security risk assessments for new projects, systems, and business processes.
• Contribute to drafting, updating, and maintaining global information security policies, standards, and procedures.
• Monitor adherence to security and regulatory requirements, including ISO 27001, NIS2, and GDPR.
• Conduct third-party security risk assessments.
• Participate in the planning and implementation of security awareness programs.
• Monitor and analyze global regulatory developments related to cybersecurity.
• Assist in the preparation, maintenance, and continuous improvement of the CISO Dashboard.
• Support the development and enforcement of governance controls for the secure use of artificial intelligence technologies.

Company Benefits & Culture

• Comprehensive benefits package.
• Opportunities for professional development and growth.
• Inclusive and collaborative work environment.