Senior GRC Analyst

Leading the design and management of control frameworks, the full-time Senior GRC Analyst will implement risk workflows, conduct third-party risk assessments, and ensure compliance with industry standards and regulations. Key responsibilities Design and govern control frameworks and risk workflows within the GRC platform to align with organizational objectives Oversee the development and maintenance of control libraries and monitor risk registers for accurate tracking and prioritization Conduct information security risk assessments and collaborate with internal teams to facilitate audits and compliance reporting Required qualifications Bachelor's degree in information security, cybersecurity, computer science, or a related field, or equivalent experience Minimum of 8 years of relevant experience in governance, risk, and compliance functions within IT or information security Certifications such as Certified Information Systems Auditor (CISA) or Certified Risk and Information Systems Control (CRISC) preferred Prior experience with compliance frameworks like HIPAA, NIST CSF, and SOC 2 Experience conducting risk assessments and supporting risk management activities