grc analyst

92Techno

We are looking for a GRC Analyst candidate should have hands on experience with Cybersecurity risk assessment, Control testing and Compliance audits.Job Description:<ul><li>Collaborate across departments to prepare for audits, customer due diligence, and regulatory reviews, ensuring internal processes meet assurance requirements.</li></ul><ul><li>Work closely with engineering, IT, and infrastructure teams to validate that access management, encryption protocols, system settings, and network design are compliant with internal policies and external obligations.</li></ul><ul><li>Contribute to the design and upkeep of a centralized control framework that integrates technical safeguards with contractual, legal, and industry-standard requirements.</li></ul><ul><li>Assess technical documentation, audit outcomes, and system evidence to evaluate control performance, identify weaknesses, and help shape remediation strategies.</li></ul><ul><li>Support the roll-out of a company-wide monitoring program by coordinating risk reporting, overseeing remediation progress, and maintaining detailed compliance records and visualizations.</li></ul><ul><li>Maintain up-to-date compliance reports and dashboards that reflect control maturity, program status, and audit readiness across key domains.</li></ul><ul><li>Track and interpret updates to global compliance frameworks and regulatory guidance, assessing their operational impact and recommending adjustments to internal controls.</li></ul><ul><li>Help operationalize compliance requirements by converting them into scalable technical and procedural practices embedded within business workflows.</li></ul>Non Technical:<ul><li>Analytical thinker</li></ul><ul><li>Collaborative team player</li></ul><ul><li>Excellent written and verbal communication</li></ul><ul><li>Capable of bridging the gap between business demands and cybersecurity requirements</li></ul><ul><li>Ability to articulate cybersecurity risks in business terms</li></ul><ul><li>Demonstrable knowledge of information security standards, data security practices and procedures</li></ul><ul><li>Understanding of the impact of various data protection and integrity controls, operating systems and network security controls, authentication controls, and security protocols</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, Business and Risk Management, or a related field.</li></ul><ul><li>2+ years of experience in GRC, audit, compliance, or risk management roles.</li></ul><ul><li>Understanding of common frameworks and regulations (e.g., NIST, COBIT, ISO, SOX, GDPR).</li></ul><ul><li>Strong analytical, organizational, and communication skills.</li></ul>Preferred:<ul><li>Certifications such as CISA, CRISC, CISSP, or ISO 27001 Lead Implementer/Auditor.</li></ul><ul><li>Familiarity with GRC tools (e.g., RSA Archer, ServiceNow GRC, LogicGate).</li></ul><ul><li>Experience working with cross-functional teams including Legal, IT, Security, and Internal Audit.</li></ul>Job Type: Full-timePay: Rs250,000.00 - Rs350,000.00 per monthWork Location: In person

GRC Analyst

QTONET PRIVATE LIMITED

Job SummaryWe are seeking a detail-oriented and analytical IT GRC Analyst (Governance, Risk &amp; Compliance) at Nashik, Maharashtra (On-site Job) to support and enhance our information security program. The ideal candidate will be responsible for managing risk assessments, ensuring regulatory compliance, supporting audits, and maintaining security policies aligned with industry standards and business objectives.Key ResponsibilitiesGovernance<ul><li>Develop, review, and maintain information security policies, standards, and procedures</li><li>Align security controls with industry frameworks (e.g., ISO 27001, NIST CSF)</li><li>Support internal security governance committees</li><li>Track remediation activities and control effectiveness</li></ul>Risk Management<ul><li>Conduct enterprise risk assessments and maintain risk registers</li><li>Perform vendor/third-party risk assessments</li><li>Facilitate Business Impact Analysis (BIA)</li><li>Recommend risk mitigation strategies</li><li>Monitor emerging security risks</li></ul>Compliance &amp; Audit<ul><li>Ensure compliance with applicable regulations (e.g., GDPR, HIPAA, PCI DSS, SOX)</li><li>Prepare for internal and external audits</li><li>Collect and maintain audit evidence documentation</li><li>Conduct control testing and gap assessments</li><li>Support certification processes (e.g., ISO 27001)</li></ul>Required Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, or related field</li><li>2&ndash;5+ years of experience in cybersecurity, risk, or compliance</li><li>Strong knowledge of risk management methodologies</li><li>Experience with security frameworks and regulatory requirements</li><li>Excellent documentation and communication skills</li></ul>Preferred Certifications<ul><li>CISSP &ndash; ISC2</li><li>CISM / CRISC &ndash; ISACA</li><li>CompTIA Security+ &ndash; CompTIA</li></ul>Technical Skills<ul><li>Understanding of security controls and architectures</li><li>Familiarity with cloud security principles</li><li>Knowledge of Identity &amp; Access Management (IAM)</li><li>Experience with GRC tools (e.g., Archer, ServiceNow, OneTrust)</li><li>Risk assessment and audit management tools</li></ul>Travel Requirement<ul><li>Candidate may be required to travel to Dubai for specific projects, client engagements, audits, or compliance activities.</li><li>Travel may be short-term or project-based, depending on business needs.</li></ul>Soft Skills<ul><li>Strong analytical and critical thinking skills</li><li>Ability to communicate risks to technical and non-technical stakeholders</li><li>Attention to detail</li><li>Project management skills</li><li>Ability to work independently and cross-functionally</li></ul>Work Environment<ul><li>Cross-functional collaboration with IT, Legal, Compliance, and Business Units</li><li>May support global compliance requirements</li></ul>Job Type: Full-timePay: ₹40,000.00 - ₹50,000.00 per monthWork Location: In person

IT GRC Analyst

Sagar Fabrics

We are seeking a skilled Cybersecurity GRC Specialist to lead and strengthen our Governance, Risk, and Compliance initiatives. This role focuses on managing cybersecurity risks, ensuring regulatory compliance, supporting audits, and implementing security frameworks to protect organizational information assets.Key Responsibilities<ul><li>Lead and manage Governance, Risk, and Compliance (GRC) activities across the organization</li><li>Perform cybersecurity risk assessments and maintain enterprise risk registers</li><li>Develop, review, and update information security policies, standards, and procedures</li><li>Ensure compliance with frameworks and regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, and NIST</li><li>Coordinate and support internal and external security audits</li><li>Track, remediate, and report audit findings and risk treatment plans</li><li>Conduct third-party/vendor risk assessments and due diligence</li><li>Monitor compliance with regulatory, legal, and contractual security requirements</li><li>Collaborate with IT, Legal, and Business teams to implement security controls</li><li>Prepare risk reports, compliance dashboards, and management presentations</li><li>Stay updated with evolving cybersecurity threats, regulations, and best practices</li></ul>Required Skills &amp; Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field</li><li>3+ years of experience in cybersecurity GRC, risk management, or compliance</li><li>Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, SOC 2, PCI-DSS, GDPR)</li><li>Experience in conducting risk assessments and audits</li><li>Strong documentation, policy writing, and reporting skills</li><li>Understanding of IT controls, data protection, and security governance</li><li>Excellent communication and stakeholder management skills</li></ul>Preferred / Good to Have<ul><li>Certifications such as ISO 27001 Lead Implementer/Auditor, CISA, CRISC, CISSP (preferred)</li><li>Hands-on experience with GRC tools (ServiceNow GRC, Archer, One Trust, etc.)</li><li>Experience in cloud security compliance (AWS, Azure, GCP)</li><li>Knowledge of data privacy laws and regulatory environments</li></ul>Job Types: Full-time, PermanentPay: ₹25,000.00 - ₹50,000.00 per monthBenefits:<ul><li>Provident Fund</li></ul>Work Location: In person

Cybersecurity GRC Analyst

Alignerr

<div>
 
 About The Job
 
 
 
 At Alignerr, we partner with the world&rsquo;s leading AI research teams and labs to build and train cutting-edge AI models.
 
 
 We&rsquo;re building high-quality datasets and evaluation frameworks for security and risk reasoning. We&rsquo;re looking for practitioners who understand how security policies, compliance programs, audits, and risk management actually work inside real organizations.
 
 
 
 Organization
 
 : Alignerr
 
 Position
 
 : Governance, Risk &amp; Compliance (GRC) Analyst
 
 Type
 
 : Hourly Contract
 
 Compensation
 
 : $30&ndash;$55 /hour
 
 Location
 
 : Remote
 
 Commitment
 
 : 10&ndash;40 hours/week
 
 
 
 What You&rsquo;ll Do
 
 
 
 <ul>
 <li>
 Review and analyze security policies, controls, and procedures
 </li>
 <li>
 Classify and evaluate compliance scenarios (SOC2, ISO, etc.)
 </li>
 <li>
 Assess risk statements and control mappings
 </li>
 <li>
 Help generate and validate training and evaluation data for AI systems
 
 
 </li>
 </ul>
 
 What We&rsquo;re Looking For
 
 
 
 <ul>
 <li>
 2+ years in GRC, compliance, or risk management
 </li>
 <li>
 Familiar with SOC2, ISO 27001, NIST, or similar frameworks
 </li>
 <li>
 Comfortable reading and interpreting policy and audit-style documentation
 </li>
 <li>
 Detail-oriented and precise in written reasoning
 
 
 </li>
 </ul>
 
 Preferred
 
 
 
 <ul>
 <li>
 Prior experience with data annotation, data quality, or evaluation systems
 
 
 </li>
 </ul>
 
 Why Join Us
 
 
 
 <ul>
 <li>
 Competitive pay and flexible remote work.
 </li>
 <li>
 Work directly on frontier AI systems
 </li>
 <li>
 Freelance perks: autonomy, flexibility, and global collaboration.
 </li>
 <li>
 Potential for contract extension.
 
 
 </li>
 </ul>
 
 Application Process (Takes 10-15 min)
 
 
 
 <ul>
 <li>
 Submit your resume
 </li>
 <li>
 Complete a short screening
 </li>
 <li>
 Project matching and onboarding
 
 
 </li>
 </ul>
 
 PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 
</div>

Governance, Risk & Compliance (GRC) Analyst

Performance Food Group

<div>Job Description:
We Deliver the Goods:<ul><li>
Competitive pay and benefits, including Day 1 Health &amp; Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more</li><li>
Growth opportunities performing essential work to support America&rsquo;s food distribution system</li><li>
Safe and inclusive working environment, including culture of rewards, recognition, and respect</li></ul>
Position Summary 
The SAP Security Analyst is responsible for managing and maintaining the security architecture, role design and maintenance of SAP and associated systems. This role ensures that access to SAP systems is properly controlled, monitored, and aligned with organizational policies and SOX compliance requirements. This role will serve as a subject matter expert in SAP security and GRC, driving strategic initiatives to ensure compliance, mitigate risk, and support business transformation across all SAP technologies and systems. This also includes S/4 HANA, ECC, Fiori and cloud systems. In depth knowledge and solid experience of SAP authorization concepts and Fiori maintenance and provisioning, in a production landscape, is a requirement. 
 
Position Responsibilities:<ul><li>
Lead the design and maintenance of SAP user roles, authorizations, Fiori design and security architecture across S4 Development, QA, Production environments and cloud systems, such as BTP.</li><li>
Maintain Fiori catalogs, spaces and pages by adding, changing, and removing objects as needed.</li><li>
Manage and optimize GRC Access Control components, including rule sets, risk analysis, EAM workflows, and mitigation strategies.</li><li>
Define and enforce Segregation of Duties (SoD) policies in collaboration with business and IT stakeholders.</li><li>
Provide strategic guidance on security best practices, risk mitigation, and compliance with SOX and audit requirements.</li><li>
Monitor and oversee security testing, user provisioning, and access reviews during system implementations, upgrades, and patching.</li><li>
Partner with solution architects, development teams and user communities to design secure custom solutions and ensure alignment with business needs.</li><li>
Mentor team members and the user community and contribute to the development of security standards, documentation, and training materials.</li><li>
Conduct periodic audits and compliance checks (e.g., SOX, GDPR).</li><li>
Provide training and support to end users and internal teams on SAP security best practices.</li><li>
Monitor and enforce the standard process such as provisioning, deprovisioning, role and/or job function changes.</li><li>
Monitor and enforce license usage in relation to entitlements.</li><li>
Document security policies, procedures, and role designs.</li><li>
Perform other duties as assigned.</li></ul>
This is a full-time position, and applicants must be located nearby to a PFG facility. Richmond, VA applicants are preferred.
Qualifications:<ul><li>Required Education: Bachelors - Information Technology, Computer Science, or a related field.</li></ul> 
<ul><li>Required Experience: 5 - 7 Years</li></ul> 
<ul><li>SAP Security, with a focus on S/4HANA</li></ul> 
<ul><li>Experience with SAP GRC Access Control, EAM, role design, and FIORI security.</li></ul> 
<ul><li>Responsibility for SAP and SOX user audits and remediation.
</li></ul> 
<ul><li>Confidence in troubleshooting skills.</li></ul> 
<ul><li>Soft skills in working and collaborating with users, internal/external auditors and members of other teams.
</li></ul> 
<ul><li>Clear and concise verbal and written communications skills.</li></ul> 
<ul><li>Must live in Richmond, VA or near a PFG facility.</li></ul>
Company description 
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.
Awards and Accolades
Performance Food Group and/or its subsidiaries (individually or collectively, the &quot;Company&quot;) provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the &quot;EEO is the Law&quot; poster and supplement; and (3) the Pay Transparency Policy Statement.</div>

Senior SAP Security Analyst

Pearson

<div>Job Title: &ndash; Lead Specialist, Information Security
Role Overview
Cybersecurity Governance, Risk &amp; Compliance function sits within the Chief Information Security Office as part of the Digital and Technology organisation that consists of a wide range of shared services reporting to the Chief Information Officer at Pearson.
We are seeking a Cybersecurity GRC professional with strong experience in reviewing supplier and customer contracts, supporting customer security questionnaires and contractual security clauses, and helping to scale GRC processes through automation and tooling.
This role sits at the intersection of cybersecurity, risk, and legal, partnering closely with Data Privacy, Legal, Technology Procurement, and Technology teams to ensure security requirements are assessed, negotiated, and managed efficiently without slowing the business.
A legal, compliance, or contract-focused background (formal or practical) is highly desirable.
Key Responsibilities
Contract Review &amp; Negotiation (Customer &amp; Supplier)
<ul><li>Review customer and supplier contracts for cybersecurity, data protection, privacy, and risk-related clauses.</li>
<li>Assess contractual requirements against internal security controls, policies, and certifications (e.g. ISO 27001, SOC 2, Cyber Essentials).</li>
<li>Support Legal and Commercial teams during contract negotiations, advising on acceptable security positions, deviations, and risk trade-offs.</li>
<li>Identify and document non-standard security obligations and ensure appropriate risk acceptance or remediation plans are in place.</li>
<li>Maintain and improve security contract clause libraries and standard positions.</li>
<li>Support Sales, Legal, and Procurement teams by providing clear, pragmatic security positions that minimise unnecessary negotiation and friction.</li>
<li>Ensure customer security questionnaires and contract reviews are completed in a way that protects the organisation while supporting rapid deal closure.</li>
</ul>Customer Assurance &amp; Sales Enablement
<ul><li>Respond to customer security questionnaires, due diligence requests, and contractual security queries.</li>
<li>Act as a subject matter expert for customer-facing security discussions, supporting Sales and Customer Success teams.</li>
<li>Ensure responses are accurate, consistent, scalable, and reusable.</li>
</ul>GRC Automation &amp; Tooling
<ul><li>Help design, implement, and optimise GRC tooling and automation (e.g. contract review workflows, questionnaire automation, evidence repositories).</li>
<li>Identify opportunities to reduce manual effort through:</li>
<li>Automated questionnaire responses</li>
<li>Clause mapping and standardised positions</li>
<li>Workflow tooling and dashboards</li>
<li>Partner with Legal, Procurement, and IT to embed GRC processes into business-as-usual tooling.</li>
<li>Identify and eliminate unnecessary complexity in security requirements, documentation, and workflows.</li>
<li>Continuously improve turnaround times for:</li>
<li>Customer security reviews</li>
<li>Contractual security assessments</li>
<li>Supplier risk evaluations</li>
<li>Measure and track improvements in time-to-market and operational efficiency as part of GRC process maturity.</li>
</ul>Governance, Risk &amp; Compliance
<ul><li>Policy Maintenance and Updating</li>
<li>Maintain and update cybersecurity policies and standards in line with the evolving threat and compliance landscape, including frameworks such as NIST.</li>
<li>Ensure all policies are current, comprehensive, and in compliance with industry standards and regulatory requirements.</li>
<li>Collaborate with stakeholders to review and implement policy changes as necessary.</li>
<li>Support the maintenance of security policies, standards, and control mappings.</li>
<li>Contribute to internal and external audits where contractual obligations are in scope.</li>
<li>Help mature the organisation&rsquo;s risk management posture.</li>
<li>Collaborate closely with leaders and teams across Digital and Technology organisation to align portfolio initiatives with the cybersecurity strategy and business objectives</li>
<li>Extend the portfolio management role to include overseeing the governance function, ensuring compliance with applicable laws, regulations, and industry standards, as well as internal policies and procedures</li>
<li>Establish and maintain strong relationships with key stakeholders, including business leaders, technology teams, and external partners, to ensure effective communication, collaboration, and support for portfolio initiatives</li>
<li>Identify and assess risks associated with portfolio initiatives, develop risk mitigation strategies, and implement appropriate controls to minimize cybersecurity-related risks</li>
</ul>Required Skills &amp; Experience
Essential
<ul><li>Experience in a cybersecurity GRC, risk, compliance, or assurance role.</li>
<li>Hands-on experience reviewing or responding to security clauses in customer and/or supplier contracts.</li>
<li>Strong understanding of:</li>
<li>Information security principles</li>
<li>Third-party risk</li>
<li>Experience responding to customer security questionnaires (e.g. SIG, CAIQ, bespoke).</li>
<li>Ability to clearly communicate risk to data privacy, legal, commercial, and non-technical stakeholders.</li>
<li>Strong written skills with attention to detail.</li>
</ul>Desirable
<ul><li>Legal, contracts, or compliance background (e.g. law degree, paralegal experience, in-house legal exposure, or equivalent practical experience).</li>
<li>Experience working closely with Legal, Procurement, or Commercial teams.</li>
<li>Familiarity with security frameworks and certifications (ISO 27001, SOC 2, NIST, Cyber Essentials).</li>
<li>Experience implementing or improving GRC tooling or automation (e.g. IronClad, GRC tools).</li>
<li>Experience in SaaS, technology, or regulated environments.</li>
</ul>What Success Looks Like
<ul><li>Faster, more consistent responses to customer security and contract requests.</li>
<li>Reduced friction between Sales, Legal, and Security.</li>
<li>Clear, repeatable contract security positions with documented risk decisions.</li>
<li>Scalable GRC processes enabled by automation and tooling.</li>
<li>Improved visibility of contractual security obligations and associated risks.</li>
<li>Security and contract reviews that enable faster sales cycles and supplier onboarding.</li>
<li>Clear, simple, and repeatable security positions that reduce back-and-forth with customers.</li>
<li>Measurable reductions in response times for customer security questionnaires and contract reviews.</li>
<li>GRC processes that are seen internally as enablers of the business, not blockers.</li>
</ul>Why Join Us
<ul><li>Opportunity to shape and scale a modern, automation-first GRC function.</li>
<li>High exposure widely across Pearson including across Data Privacy, Legal, Sales, Procurement, and Technology.</li>
<li>Real influence on how the business manages contractual cybersecurity risk.</li>
<li>Supportive environment for professional development</li>
</ul>Who we are:
At Pearson, our purpose is simple: to help people realize the life they imagine through learning. We believe that every learning opportunity is a chance for a personal breakthrough. We are the world's lifelong learning company. For us, learning isn't just what we do. It's who we are. To learn more: We are Pearson.
Pearson is an Equal Opportunity Employer and a member of E-Verify. Employment decisions are based on qualifications, merit and business need. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, sexual orientation, gender identity, gender expression, age, national origin, protected veteran status, disability status or any other group protected by law. We actively seek qualified candidates who are protected veterans and individuals with disabilities as defined under VEVRAA and Section 503 of the Rehabilitation Act.
If you are an individual with a disability and are unable or limited in your ability to use or access our career site as a result of your disability, you may request reasonable accommodations by emailing TalentExperienceGlobalTeam@grp.pearson.com.
Job: Security
Job Family: TECHNOLOGY
Organization: Corporate Strategy &amp; Technology
Schedule: FULL\_TIME
Workplace Type: Hybrid
Req ID: 22519</div>

Lead Specialist, Information Security

Archer Integrated Risk Management

<div>
 Job Details
 
 
 
 Description
 
 
 
 For nearly 25 years, Archer has been a pioneer and a trusted global leader in delivering comprehensive compliance and risk management solutions to empower organizations to effectively navigate risks, ensure compliance, and achieve their business objectives. Our innovative GRC solutions are designed to provide companies with a clear, unified perspective on their risk landscape and enable data-driven decision-making and strategic planning. By leveraging cutting-edge technologies such as AI and risk quantification, we equip our clients to anticipate, adapt to, and overcome challenges in today&rsquo;s rapidly evolving market. At Archer, we don&rsquo;t just help organizations manage risk &mdash; we help our clients transform risk into a strategic advantage and turn uncertainty into opportunity. Learn more at www.ArcherIRM.com
 
 
 
 Role Overview
 
 
 
 We are seeking a motivated and detail-oriented Risk Analyst to support the effective operation of Archer&rsquo;s Enterprise Risk Management and Third Party Risk Management activities. The role provides practical, hands‑on support to risk processes, systems, and reporting, ensuring timely, accurate, and consistent execution of risk oversight activities across the business. The role has a strong focus on operational excellence, data quality, and stakeholder support, acting as a key enabler for both internal risk teams and the wider business.
 
 
 
 Key Accountabilities &amp; Activities
 
 
 
 
 Third
 
 
 ‑
 
 
 Party Risk Management (TPRM)
 
 
 
 <ul>
 <li>
 Support the execution of Third‑Party Risk Management activities, including onboarding, periodic reviews, issue tracking, and remediation monitoring.
 </li>
 <li>
 Assist with coordination and tracking of third‑party risk assessments, ensuring outputs are complete, accurate, and retained in line with policy, audit, and regulatory expectations.
 </li>
 <li>
 Support escalation of overdue or high‑risk third‑party issues in line with defined governance processes.
 
 
 </li>
 </ul>
 
 Risk Systems &amp; Tools (Archer)
 
 
 
 <ul>
 <li>
 Provide day‑to‑day operational support for internal Archer GRC instances, including user support, data maintenance, and data quality validation.
 </li>
 <li>
 Maintain risk, control, issue, finding, and action data to ensure accuracy, consistency, and audit readiness.
 </li>
 <li>
 Support system‑driven oversight of findings, actions, and remediation status across risk domains.
 
 
 </li>
 </ul>
 
 Findings &amp; Action Oversight
 
 
 
 <ul>
 <li>
 Support the management and oversight of all risk findings and associated actions.
 </li>
 <li>
 Track findings and actions from identification through to closure, ensuring appropriate ownership, timely progression, and evidence of remediation.
 </li>
 <li>
 Support reporting and escalation of overdue, high‑risk, or systemic issues in line with risk governance expectations.
 
 
 </li>
 </ul>
 
 Risk Oversight, Assurance &amp; ISO Support
 
 
 
 <ul>
 <li>
 Support ISO‑aligned and audit‑defined risk activities where required, including evidence collation, tracking of actions, and support for assurance reviews.
 </li>
 <li>
 Assist with the coordination of internal and external audit or assurance activities relevant to the RMO.
 </li>
 <li>
 Maintain accurate records and reporting to demonstrate compliance with defined standards, frameworks, and control expectations.
 
 
 </li>
 </ul>
 
 Risk Reporting &amp; MI
 
 
 
 <ul>
 <li>
 Maintain and update quarterly risk oversight reports, ensuring timely, accurate inputs and consistency across reporting outputs.
 </li>
 <li>
 Support preparation of risk management information (MI) for risk forums, committees, and senior stakeholders.
 </li>
 <li>
 Perform basic trend analysis across risks, findings, and actions to identify emerging issues or areas of concern.
 
 
 </li>
 </ul>
 
 Workflow &amp; Operational Support
 
 
 
 <ul>
 <li>
 Assign and manage JIRA tickets related to risk, compliance, and GRC activities, ensuring appropriate triage and visibility of progress.
 </li>
 <li>
 Monitor workloads and queues to support effective delivery of RMO services.
 
 
 </li>
 </ul>
 
 Embedding Risk Across the Organization
 
 
 
 <ul>
 <li>
 Support the wider embedding of risk management activities across the business through consistent application of processes, tools, and reporting.
 </li>
 <li>
 Act as a point of support for stakeholders engaging with risk processes, promoting clarity, consistency, and adherence to the risk framework.
 
 
 </li>
 </ul>
 
 Stakeholder Interaction
 
 
 
 <ul>
 <li>
 Work closely with members of the Risk Management Office and the Information Security Team
 </li>
 <li>
 Engage with internal stakeholders across the first and second lines of defence in support of risk processes and reporting.
 </li>
 <li>
 Act as a reliable point of contact for operational queries relating to risk systems and TPRM activities.
 
 
 </li>
 </ul>
 
 Key Competencies
 
 
 
 <ul>
 <li>
 Cross-functional collaboration: Comfortable working with global stakeholders
 </li>
 <li>
 Adaptability &amp; agility: Comfortable navigating changing priorities, regulatory landscapes, and business contexts.
 </li>
 <li>
 Analytical &amp; problem-solving mindset: Able to analyse complex data processing activities and recommend pragmatic solutions.
 </li>
 <li>
 Proactive communication: Clear, concise, and confident communicator across business and technical teams.
 </li>
 <li>
 Detail-oriented &amp; organised: Able to manage multiple concurrent projects while maintaining accuracy and focus.
 
 
 </li>
 </ul>
 Archer is committed to the principle of equal employment opportunity for all employees and applicants for employment and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Archer are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion, national origin, sex (including pregnancy), age, disability, sexual orientation, gender identity, and/or expression, marital, civil union or domestic partnership status, protected veteran status, genetic information, or any other characteristic protected by federal, state or local laws. Archer will not tolerate discrimination or harassment based on any of these characteristics. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. All Archer employees are expected to support this policy and contribute to an environment of equal opportunity.
 
 
 If you need a reasonable accommodation during the application process, please contact talent-acquisition@archerirm.com. All employees must be legally authorized to work in Egypt. Archer participates in E-Verify. Archer and its approved consultants will never ask you for a fee to process or consider your application for a career with Archer. Archer reserves the right to amend or withdraw any job posting at any time, including before the advertised closing date.
</div>

Enterprise Risk Advisor

Search 3063+ Grc analyst jobs near you this March. New roles added regularly across leading industries. Apply today.