grc analyst

Tungsten Automation

<div><ul><li>Job Purpose

This role reports to the Sr. Director of Security &amp; Compliance and will manage aspects of corporate compliance and risk management, including internal audits, external audits, and customer and vendor audits. The Staff GRC Analyst will ensure that the organization's Information Security policies and procedures are implemented and well documented and that compliance issues are identified, and remediation plans formalized in a timely fashion. The Staff GRC Analyst will perform internal reviews and develop risk management strategies to avoid non-compliance.
Key Responsibilities
<ul>
<li>Provides point of contact for assigned audits which may include customer audits, statutory/regulatory audits, SOC 2, PCI or others as needed</li>
<li>Serve as company representative with clients and partners, responding to security questionnaires and managing audits</li>
<li>Performs risk assessments, analysis, and synthesis of internal IT &amp; business process controls</li>
<li>Ability to conduct, evaluate, test, and document internal controls assessments</li>
<li>Ability to communicate identified control weaknesses and provided recommendations for remediation and risk mitigation</li>
<li>Compliance audit reviews, and remediation testing of issues identified during third-party assurance reviews or internal assessments</li>
<li>Advises internal business clients on the effectiveness of corrective action plans in the event of non-compliance or detected vulnerabilities in their environment.</li>
<li>Contributes to various project requests from functional teams to increase operational efficiency, strengthen the IT environment, and help meet the company's internal and external regulatory or compliance requirements.</li>
<li>Performs ad-hoc compliance requests or additional duties as assigned</li></ul></li> 
</ul>
<h2 class="jobSectionHeader">ABOUT OUR PLATFORM</h2>

Tungsten Automations Intelligent Automation software platform helps government agencies transform information-intensive business processes, reduce manual work and errors, minimize costs, and improve customer engagement. We combine Generative AI, Knowledge Management, Intelligent Document Processing, Process Orchestration, mobility and engagement, and analytics to ease implementations and deliver dramatic results that mitigate compliance risk and increase competitiveness, growth and profitability&mdash;particularly crucial for highly regulated industries facing complex compliance requirements. No other software vendor offers a platform of complementary technologies integrated into a scalable, manageable software platform, positioning us to grow and dominate the process automation space. 


While the job description describes what is anticipated as the requirements of the position, the job requirements are subject to change based upon any changing needs and requirements of the business. 

 
 
Required Skills 
<ul><li>Qualifications
<ul>
<li>Prior experience conducting internal and external risk assessments and compliance measures and / or remediation items and implementing and enforcing policies and procedures</li>
<li>Familiar with GRC tools for managing audit controls, evidence gathering and reporting</li>
<li>Experience with CIS or ISO audit programs</li>
<li>Experience performing third party assurance assessments</li>
<li>Excellent client/interdepartmental relationship and customer service skills, with a clear client focus</li>
<li>High degree of independence and exceptional work ethic with a team player attitude and a detailed- and solution-oriented mind</li>
<li>Familiarity with core IT and Information Security Technologies</li>
<li>Exceptional interpersonal, written, and oral communication skills</li></ul> 
</li>
</ul> 
 
Required Experience 
<ul><li>Required Experience
<ul>
<li>Certifications in GRC</li>
<li>See Qualifications section</li>
<li>Experience with risk management tools</li>
<li>Excellent documentation skills</li></ul></li> 
</ul>
Tungsten Automation Corporation, Inc. is an Equal Opportunity Employer M/F/Disability/Vets 


The base salary range for this role, across the US, is $107,190 - $120,716. Your actual base pay within this range will be determined by your work location as well as skills, qualifications, experience, and relevant education/training. The range provided reflects only the base salary for the role and does not include benefits.</div>

GRC Analyst

Leidos

Description <ul><li> We're a ' Family Friendly ' certified w orkplace - we understand the diverse roles our team members need to play within their own unique family setting and actively support them. </li></ul> O ur team feel Leidos is a g reat p lace to w ork . L earn more about our culture and benefits by visiting us here Do Work That Matters Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life . Our 2000 local experts, backed by our global experience and network of partners, are working to solve the world's toughest challenges in government, intelligence, defence, aviation, border protection and health markets. Your New Role and Responsibilities As a Cyber Security GRC Analyst, you will be responsible for contributing cyber security subject matter expertise and advice to stakeholders and the broader team through analyses and intersection of the governance, risk, and compliance aspects of systems. This is an interesting role with broad responsibilities and scope that will allow you to test and hone your skills, whilst contributing to National Security, your responsibilities will include the following; <ul><li> Evaluate the effectiveness of security controls against the Australian Government ISM, Essential Eight, Cyberworthiness , NIST, other approved cyber security frameworks, and standard designs. </li><li> Conduct security, gap, and compliance audits, including reporting and documentation management. </li><li> Maintain, verify, and update accreditation documentation sets for each environment on an ongoing basis. </li><li> Develop and submit high-quality artefacts in a timely manner , including risk assessments, security documentation, and compliance reports. </li><li> Apply cyber security governance, risk, and compliance principles in practice, including preparation of risk registers, security plans, and audit results. </li></ul> What You'll Bring to Make An Impact <ul><li> Demonstrated customer focus and motivation to deliver outcomes aligned with customer mission needs, supported by relevant education and/or practical experience. </li><li> Over two years' experience in Cybersecurity GRC, audit, risk, or compliance roles, with proven ability to produce high-quality security assessment documentation. </li><li> Familiarity with risk management frameworks including ISO 31000, FAIR, OCTAVE, and NIST RMF, and holding certifications such as CRISC, CISM, CISA, CISSP, ISO 27001 or similar. </li><li> Excellent communication and stakeholder management skills, with strong attention to detail and sound organisational abilities. </li><li> Experience working with Defence is desirable. </li></ul> Don't worry if you don't tick all the boxes - if you meet most of them, we encourage you to submit your application . We're most interested in your strengths, what you want to learn and how far you want to go. Successful candidates will be required to be Australian Citizens and hold and maintain a minimum NV-2 Australian Government Security Clearance. Di verse Team Members , Shared Values and a Common Purpose Providing our customers with smarter solutions takes an incredible team with diversity of thought, experience and perspectives d riving innovation. Inclusion is at the heart of our culture and is one of our core values . I t's about creating a workplace where everyone can do important work, feels welcome, valued , and respected, and has equal access to opportunities to thrive. Paul Chase - Chief Executive , Leidos Australia. Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace . We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups. Our five A dvocacy G roups (Women and Allies Network, Young Professionals, Defence & Emergency Services, Action for Accessibility and Abilities and Pride+) provide an opportunity for team members to connect and collaborate on shared interests, and work to support and celebrate our diverse community . Next Steps <ul><li> To apply for this role, follow the links or apply via our Careers page. </li><li> Recruitment process - interviews a nd background checks . </li><li> Applicants may also need to meet International Traffic in Arms Regulations (ITAR) requirements. In certain circumstances this can place limitations on persons who hold dual nationality, permanent residency or are former nationals of certain countries as per ITAR 126.1. </li><li> We are committed to making our recruitment process accessible to all candidates. Please contact our C areers team if you 'd like to discuss any additional support during your application or throughout the recruitment process . </li></ul> At Leidos, we don't want someone who "fits the mold"-we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now." If you're already scheming step 20 while everyone else is still debating step 2 good. You'll fit right in. Original Posting: For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at . Securing Your Data Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission . Commitment to Non-Descrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Cyber Security GRC Analyst

Semperis

<div>
 
 At Semperis, our mission is to be a Force for Good. Starting with being a great place to work.
 
 We believe that when people feel valued, supported, and empowered, they do their best work. That&rsquo;s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America&rsquo;s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee.
 
 
 <ul>
 <li>
 Please Note all Requirements! Hybrid role
 </li>
 <li>
 We cannot sponsor at this time
 
 
 </li>
 </ul>
 Semperis is looking for a detail-oriented and analytical
 
 Cyber Risk Analyst
 
 to join our Security &amp; Risk team. In this role, you will play a crucial part in safeguarding the organization's assets and ensuring operational resilience by identifying and assessing potential Cyber Risks of all incoming vendors, third parties, services, and technology. You will collaborate with cross-functional teams and third-party vendors and providers, to request, collect, and analyze pertinent information and collateral, assess Cyber Risks, and recommend or require effective Cyber Risk control strategies.
 
 
 
 Position Summary
 
 
 
 The Technology Risk Analyst is responsible for protecting the organization by identifying, assessing, and mitigating risks across our technology environment, including applications, infrastructure, and third-party vendors. They use data and analytical models to forecast potential outcomes, advise management on strategic decisions, and develop control plans to minimize losses. A critical function of this role is to manage technology risk ensuring all deviations from policy &amp; standards are properly documented, compensated, and reviewed. This role requires strong familiarity with GRC concepts, modern GRC tools, and hands-on experience in risk analysis mitigation and compliance assurance.
 
 
 
 Key Responsibilities
 
 
 
 
 Risk Management
 
 
 
 <ul>
 <li>
 Risk Identification &amp; Assessment: Conduct technology risk assessments across new and existing applications, Review submitted risk exception requests, validate technical necessity, evaluate proposed compensating controls, and assign residual risk ratings (High, Medium, Low).
 </li>
 <li>
 Documentation: Ensure comprehensive, auditable documentation is maintained for all approved, denied, and conditionally approved exceptions, including mandatory review dates and resolution plans.
 </li>
 <li>
 Data Analysis and Modeling: Collect, process, and interpret multiple sources of data to model Cyber Risk scenarios, forecast potential outcomes, and evaluate Cyber Risk exposure. Translate technical findings into clear, measurable business risk statements for audience in multiple disciplines including leadership, customers and technical delivery teams.
 </li>
 <li>
 Monitoring: Track risk plan milestones and drive issue management initiating timely follow-ups with Business Owners to ensure our controls are adequate, compliance is assured and overall risk goals are met.
 </li>
 <li>
 Remediation Support: Develop mitigation strategies, recommend strategies to reduce, transfer, or avoid identified Cyber Risks - such as implementing new policies, controls, or processes. Collaborate with other teams to define and prioritize remediation efforts based on risk severity and business impact.
 </li>
 <li>
 Process improvement: Improve and automate Risk management process, working with the security and risk leadership teams.
 
 
 </li>
 </ul>
 
 Third party Risk Management (VRM)
 
 
 
 <ul>
 <li>
 3rd party Due Diligence: Perform security assessments of new and existing third-party vendors and service providers, reviewing security attestations (e.g., SOC 2, ISO 27001) and security questionnaires.
 </li>
 <li>
 Risk Analysis: Assess incoming compliance artifacts provided by third parties and research external sources to develop comprehensive risk assessments including risk scoring metrics.
 </li>
 <li>
 Risk Reporting: Document and communicate inherent and residual risks associated with vendor reliance and data handling practices. Prepare detailed reports, summaries, and presentations for management and stakeholders to communicate findings, recommendations, and trends.
 
 
 </li>
 </ul>
 
 GRC Automation &amp; Process Improvement
 
 
 
 <ul>
 <li>
 Tooling: Utilize and manage the corporate GRC platform and risk management tools to streamline risk workflows, automate control monitoring, and improve reporting efficiency.
 </li>
 <li>
 Automation: Identify opportunities to automate manual GRC tasks, specifically integrating risk tracking and control evidence gathering into GRC tools.
 
 
 </li>
 </ul>
 
 Policy, Compliance &amp; Customer Support
 
 
 
 <ul>
 <li>
 Respond to customer, partner or compliance questionnaires related to product security. This will involve Liaoning with product teams and other knowledge sources to maintain a knowledge library, utilizing a combination of AI, manual &amp; automated process to prepare SQ responses according to SLA expectations.
 </li>
 <li>
 Standard Maintenance: Support the Risk &amp; InfoSec team in reviewing, updating, and aligning IT Security Policies, Standards, and Procedures with regulatory requirements and industry best practices.
 </li>
 <li>
 Audit Readiness: Assist in gathering evidence and documentation required for internal and external security audits and compliance reviews.
 </li>
 <li>
 Stay updated with industry trends, regulatory changes, and compliance standards to ensure the organization adheres to all legal and regulatory requirements
 
 
 </li>
 </ul>
 
 Required Skills And Qualifications
 
 
 
 <ul>
 <li>
 Experience: 5+ years of relevant experience in Information Security, IT Risk Management, IT Audit, or GRC, with a heavy focus on technology risk.
 </li>
 <li>
 GRC Expertise: Deep working knowledge of key GRC concepts, risk assessment methodologies, and industry frameworks (e.g., NIST SP 800-53/CSF, ISO 27001).
 </li>
 <li>
 GRC Tooling: Proven, hands-on experience using and configuring modern GRC platforms for risk management, policy management, and compliance automation. Experience in configuring and using tools such as Archer, ServiceNow, MetricStream or Vanta preferred.
 </li>
 <li>
 Technical Proficiency: Experience with IT and Security tools, SaaS / other Cloud technologies and/or software development. Understanding of Security Controls, and cross-discipline cybersecurity, endpoint, network, data, identity, access management, privacy, accessibility, etc. concepts. Clear understanding of foundational Information Protection concepts is required.
 </li>
 <li>
 Analytical Skills: Exceptional ability to analyze complex technical vulnerabilities and control failures/gaps, translating them into measurable business risk, with detailed quantitative assessment skills to support findings &amp; recommendations.
 </li>
 <li>
 Communication: Excellent written and verbal communication skills, including the ability to communicate technical risk concepts effectively to both technical and executive audiences.
 </li>
 <li>
 Certifications: CRISC, CISM, CISA, or similar recognized security and risk management certifications.
 </li>
 <li>
 Education: Bachelor&rsquo;s degree in computer science, Information Security, or a related field.ot be sufficient)
 
 
 </li>
 </ul>
 
 Why Join Semperis?
 
 
 
 You&rsquo;ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you&rsquo;re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life&mdash;we&rsquo;d love to meet you.
 
 
 <ul>
 <li>
 Semperis maintains office locations in several cities across the globe. Candidates who reside within 45 miles of one of our offices&mdash;or where the job description specifies a required location&mdash;will follow our hybrid work model. This includes working onsite three days per week and remotely the remaining days.
 
 
 </li>
 </ul>
 Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics.
 
 
 Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.
 
 
</div>

Cyber Risk Analyst

NuHarbor Security

<div><h2 class="jobSectionHeader">The Company</h2>

Every day, NuHarbor Security improves the cybersecurity of our clients by making it stronger and easier to understand. Our comprehensive suite of security services, from strategic advising to 24-hour monitoring and management, provide an organizational view of security that is focused on results and recommendations that are valuable for both business and technical leaders. We're growing quickly because our clients, and the general market, are looking for these outcomes and for the data it gives them to explain, promote, and justify, their security investment and mission.
<h2 class="jobSectionHeader">
The Role</h2>

The Senior Information Assurance (IA) Analyst is a senior resource supporting a long-term, strategic Governance, Risk, and Compliance (GRC) program with a designated client. This role works closely with service delivery teams, client stakeholders and third-party service providers to assess, mature, and operationalize GRC processes over the life of the contract.

The Senior IA Analyst performs hands-on delivery with limited oversight, serves as a subject matter expert in NIST-aligned risk and compliance practices, and supports the integration of GRC services into ongoing security operations. This role requires consistent collaboration, strong relationship management skills, and the ability to operate effectively within a multi-vendor environment.

What you'll do
<ul>
<li>Lives by the NuHarbor values: Help Clients Win, Always Improve, Protect the House</li>
</ul><ul><li>Serves as a senior Information Assurance and GRC resource supporting a long-term strategic client engagement</li>
</ul><ul><li>Works directly with client stakeholders and third-party service providers to support ongoing GRC activities, assessments, and operational initiatives</li>
</ul><ul><li>Supports execution and continuous improvement of governance, risk, and compliance processes aligned to NIST principles</li>
</ul><ul><li>Leads application of NIST 800-53 and NIST risk management and assessment principles to identify control gaps and risks, and to develop, prioritize, and manage POA&amp;M-driven remediation and risk reduction strategies.</li>
</ul><ul><li>Contributes to refinement of GRC workflows, reporting, and compliance tracking capabilities, and supports operational integration of GRC services across security operations and long-term delivery models</li>
</ul><ul><li>Participates in stakeholder meetings, workshops, and information gathering activities across the client and vendor ecosystem</li>
</ul><ul><li>Owns and develops GRC and security program documentation and artifacts, ensuring ongoing accuracy, consistency, and alignment to program requirements</li>
</ul><ul><li>Synthesizes and communicates risk, compliance, and control information in a clear, actionable, and audience appropriate manner.</li>
</ul>
Your foundation. The requirements for this role:
<ul>
<li>Bachelor's degree and three (3) years of experience in cybersecurity, information assurance, or risk management roles.</li>
</ul><ul><li>In lieu of a degree, an additional two (2) years of experience in a related technology or risk management field and relevant industry certifications are required.</li>
</ul><ul><li>At least 2 years of hands-on GRC specific experience supporting risk assessments, security control evaluations, compliance requirements and remediation efforts</li>
</ul><ul><li>Demonstrated expertise applying NIST frameworks and risk management principles to assess control implementation, evaluate risk posture, and identify compliance gaps</li>
</ul><ul><li>Demonstrated experience developing, prioritizing, and managing Plans of Action and Milestones (POA&amp;Ms), including remediation planning and risk reduction activities</li>
</ul><ul><li>Demonstrated experience managing, building, or supporting workflows within a GRC platform, including risk, issue, and remediation tracking</li>
</ul><ul><li>Strong written and verbal communication skills with the ability to translate complex risk, control, and compliance concepts into clear, actionable language</li>
</ul><ul><li>Ability to manage and prioritize multiple concurrent workstreams while maintaining focus on long-term program objectives</li>
</ul><ul><li>Ability to perform effective research and analysis through stakeholder interviews, workshops, and document review.</li>
</ul><ul><li>Must be a citizen of the United States</li>
</ul>
Additional capabilities that will differentiate you for this role:
<ul>
<li>Holds at least one industry accepted, relevant certification such as Security+, CISM, CISA, CRISC, CISSP, CCSP.</li>
</ul><ul><li>Experience supporting long-term or multi-year client engagements and operating within established service delivery models</li>
</ul><ul><li>Experience working with ServiceNow GRC functionality, including risk management, policy and compliance management, issue and remediation tracking, and reporting workflows.</li>
</ul><ul><li>Experience collaborating with different stakeholders and service providers in a multi-vendor or shared-responsibility environment</li>
</ul>
Base Salary for this role is targeted at $85,000 - $110,000 annually. *Salary based on Burlington, VT salary data. Offer is based on candidate geography. Additionally, this role is eligible for the company bonus plan at a 10% target.

NuHarbor Security hires in the following states: AZ, CO, FL, GA, IL, IN, IA, MA, MD, ME, MI, MN, MO, MT, NC, NE, NH, NJ, NY, OH, OR, PA, SC, TX, VT, VA, WA
<h2 class="jobSectionHeader">
The Rewards</h2>

What you can expect:
<ul>
<li>The engagement and support of company leadership who recognize the challenge of marketing a complex cybersecurity service in a chaotic market.</li>
<li>An organization that recognizes and rewards employee commitment and contribution to our customers' satisfaction and success</li>
<li>Growth in your career and capabilities as you help to chart a path to improving customer interactivity and service adoption.</li>
<li>A collaborative and driven working environment in a rapidly growing company and market</li>
<li>A fun and social working environment where you are encouraged to be your true self.</li>
</ul>
You can also expect competitive salary and benefits, including paid time to give back in your community and generous PTO.

We are purpose driven. We, as an organization, above anything else protect the house first and then help our customers win. If this sounds like the kind of organization you'd like to be a part of, we'd like to hear from you. 


AAP/EEO Statement

The Equal Employment Opportunity Policy of NuHarbor Security is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. NuHarbor Security hires and promotes individuals solely based on their qualifications for the job to be filled.

NuHarbor Security believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.</div>

Senior Information Assurance Analyst

ENCS Networks

Summary: The Enterprise GRC Associate supports the company&rsquo;s Governance, Risk, and Compliance activities by assisting with risk assessments, control testing, policy management, and audit readiness. The role works with cross-functional teams to maintain compliance, strengthen internal controls, and improve overall risk posture.Key Responsibilities:<ul><li>Assist with enterprise risk assessments and maintain the risk register.</li><li>Support compliance efforts (SOC 2, ISO 27001, SOX, GDPR, etc.) through evidence collection and control testing.</li><li>Help prepare audit documentation and coordinate internal/external audits.</li><li>Maintain policies, procedures, and GRC documentation.</li><li>Monitor remediation of risks and audit findings.</li><li>Collaborate with IT, Security, Legal, and Operations teams on GRC initiatives.</li></ul>Qualifications:<ul><li>Bachelor&rsquo;s degree in Business, IT, Cybersecurity, or related field.</li><li>3 years of experience in GRC, audit, risk, or compliance preferred.</li><li>Strong analytical, documentation, and communication skills.</li><li>Familiarity with frameworks like ISO 27001, SOC 2, NIST, or COSO is a plus.</li></ul>Job Type: Full-timePay: Rs80,000.00 - Rs120,000.00 per monthApplication Question(s):<ul><li>Maintain GRC documentation including policies, procedures, risk reports, and compliance artifacts in previous role?</li><li>Worked in third-party/vendor risk reviews by assessing security certifications and compliance documentation?</li><li>Excellent English Communication skills?</li><li>Its onsite role in RWP Night shift comfortable?</li><li>Salary Mentioned in this ADD is final comfortable?</li></ul>Work Location: In person

Growth Enterprise (onsite/Night Shift)

Innovative Solutions

<div>Innovative Solutions (IS) is a leading pure-player Cyber security company in the GCC established in 2003 headquartered in Riyadh with presence in Al Khobar, Jeddah, Dubai, and Abu Dhabi. Our Cybersecurity Solutions and Services encompasses Advisory Services, Technical Assurance, Solution Deployment, Professional Services and Managed Security Services.
Innovative Solutions is committed to its Mission to &ldquo;Bring Trust to Cyberspace&rdquo; to ensure &ldquo;Your Business, Secured!&rdquo;.
Role Description
The Associate GRC Specialist will support the Governance, Risk, and Compliance (GRC) program at Innovative Solutions. You will assist in conducting compliance audits, risk assessments, and ensuring that security policies and procedures are implemented effectively. This role offers an excellent opportunity for professional growth and development in the field of cybersecurity governance.<h3 class="jobSectionHeader">
Responsibilities</h3><ul><li><ul>
<li>Assist in the development, implementation, and maintenance of GRC policies and procedures.</li>
<li>Participate in compliance audits and risk assessments to identify potential gaps.</li>
<li>Support the team in monitoring compliance with applicable regulations and standards.</li>
<li>Document findings and assist in the preparation of reports for management.</li>
<li>Collaborate with teams across the organization to promote a culture of compliance and risk awareness.</li>
<li>Keep abreast of industry best practices, trends, and regulatory changes related to cybersecurity.</li>
<li>Support the organization in training and awareness sessions regarding GRC-related topics.</li>
</ul></li></ul>
Requirements<ul><li><ul>
<li>
Bachelor's degree in Cybersecurity, Information Technology, Business Administration, or a related field.</li>
<li>Familiarity with regulatory requirements and industry standards</li>
<li>0-1 years of experience in governance, risk management, compliance, or a related area.</li>
<li>Basic understanding of cybersecurity frameworks and regulatory requirements.</li>
<li>Strong analytical and problem-solving skills.</li>
<li>Excellent written and verbal communication skills.</li>
<li>Ability to work collaboratively within a team environment.</li>
<li>Willingness to learn and grow in the field of Governance, Risk, and Compliance.</li>
</ul></li></ul>
Benefits<ul>
<li>
Comprehensive training and development programs.</li>
<li>Opportunity for career growth and advancement.</li>
<li>Friendly and supportive work environment.</li></ul></div>

Associate GRC Specialist

Search 2547+ Grc analyst jobs near you this January. New roles added regularly across leading industries. Apply today.

2547 grc analyst jobs NEAR_ME

GRC Analyst

Cyber Security GRC Analyst

Cyber Security GRC Analyst

Cyber Risk Analyst

Senior Information Assurance Analyst

Growth Enterprise (onsite/Night Shift)

Associate GRC Specialist