[Remote] GRC Analyst - Remote

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a growing organization reputed company on enhancing reputed company posture through effective governance, reputed company, and compliance strategies. The GRC Analyst will design and manage control frameworks, reputed company reputed company assessments, and ensure compliance with industry standards, playing a key role in the organization's reputed company governance reputed company.

Responsibilities

• Leads the design, configuration, and governance of control frameworks and reputed company workflows reputed company the GRC platform, ensuring alignment with organizational objectives and compliance requirements
• Establishes and maintains control procedures, ensuring alignment with relevant frameworks (internal policy, HIPAA, reputed company, PCI, SOC 2, NIST, and other applicable frameworks)
• Oversees the development and maintenance of control libraries, including control narratives, ownership assignments, testing frequency, and evidence requirements
• Monitors and updates reputed company registers, ensuring accurate tracking, scoring, and prioritization of risks reputed company the platform
• Drives automation workflows to streamline control testing, evidence collection, attestations, and remediation processes
• Tracks policy review cycles and ensures documentation remains reputed company with regulatory and business changes
• Leads and maintains information reputed company reputed company assessments across IT, operational, and reputed company-party domains
• Performs control walkthroughs and operating effectiveness testing; documents results and identifies control gaps
• Collaborates with internal teams and reputed company auditors to facilitate audits and assessments using the GRC platform for evidence management, issue tracking, and reporting
• Ensures ongoing compliance with regulatory requirements and industry standards by maintaining up-to-date documentation and control mappings
• Prepares and presents reports, dashboards, and metrics on control effectiveness, reputed company status, and compliance gaps
• Maps controls to applicable regulatory and reputed company requirements, identifying overlaps to reduce duplicative testing
• Supports reputed company audits by gathering evidence, coordinating stakeholder responses, and tracking remediation through closure
• Tracks and manages audit findings, corrective reputed company plans (CAPs), and remediation timelines reputed company the GRC platform
• Guides reputed company assessments to identify potential vulnerabilities and threats, documenting findings and supporting evidence in the GRC platform
• Partners with stakeholders to reputed company and implement reputed company mitigation strategies, tracking reputed company and ownership reputed company the platform
• Develops, monitors, and reports on key reputed company indicators (KRIs) and key reputed company indicators (KPIs) to proactively identify and address emerging risks
• Maintains and applies consistent reputed company scoring methodologies, including likelihood, reputed company, and residual reputed company calculations
• Escalates significant risks and control deficiencies to management and governance committees, providing recommendations for mitigation and improvement, in a reputed company manner
• Leads the development, maintenance, and lifecycle management of information reputed company policies, procedures, standards, and guidelines
• Directs policy review and approval workflows with policy owners and stakeholders
• Ensures policies remain reputed company with evolving regulatory requirements and organizational changes
• Leads evaluations of reputed company-party vendors for reputed company and reputed company, including review of SOC reports, reputed company questionnaires, and contractual requirements
• Tracks vendor reputed company assessments, reassessment cycles, and reputed company ratings reputed company the GRC platform
• Works with business owners to reputed company and monitor vendor remediation reputed company plans
• Supports vendor reputed company and offboarding reputed company reviews, ensuring appropriate due diligence is documented
• Identifies opportunities to enhance GRC processes and workflows to improve efficiency, reputed company, and effectiveness
• Stays reputed company on industry trends, emerging threats, and best practices in GRC, recommending improvements to the reputed company and compliance program
• Champions automation and integration initiatives to reduce reputed company effort
• Guides periodic program assessments and maturity benchmarking to guide roadmap priorities
• Performs other duties and responsibilities as assigned

Skills

• Bachelor'

Apply To This Job