grc analyst

Fourth Command

<p>Job Overview</p><p>We are seeking a skilled GRC Analyst to join our Governance, Risk, and Compliance team. The GRC Analyst will be responsible for supporting the implementation, maintenance, and optimization of GRC programs using the OneTrust GRC platform, with hands-on experience in risk assessment, control management, compliance monitoring, audit support, and reporting. The role requires strong technical proficiency in OneTrust for managing policies, risks, audits, and workflows, along with familiarity with other GRC platforms to support enterprise clients in achieving regulatory compliance and risk management objectives.</p><p>Key Responsibilities</p><ul><li><b>OneTrust GRC Platform Operations:</b> Configure, administer, and optimize OneTrust GRC platform including risk assessments, policy management, control mapping, audit workflows, and automated notifications using OneTrust Athena AI for intelligent risk identification and remediation.</li><li><b>Risk Management:</b> Conduct risk assessments, maintain risk registers, track key risk indicators (KRIs), and implement risk treatment plans with automated workflows and stakeholder task assignments in OneTrust.</li><li><b>Compliance Monitoring:</b> Map controls to frameworks (ISO 27001, SOC 2, GDPR, PCI DSS), monitor compliance status, manage evidence collection, and generate compliance reports and dashboards.</li><li><b>Audit and Assessment Support:</b> Support internal and external audits by managing audit workflows, collecting evidence, tracking findings, and facilitating remediation using OneTrust's audit management capabilities.</li><li><b>Policy and Control Management:</b> Develop, review, and maintain security policies, standards, and procedures; map controls across multiple frameworks; and distribute policies with role-based access controls.​</li><li><b>Third-Party Risk Management:</b> Manage vendor assessments, questionnaires, and third-party risk monitoring using OneTrust's integrated workflows and risk scoring features.​</li><li><b>Platform Administration:</b> Manage user roles, permissions, organizational hierarchies, SSO integration (SAML 2.0), SCIM provisioning, and custom workflows in OneTrust GRC.​</li><li><b>Reporting and Analytics:</b> Create custom reports, dashboards, and executive summaries on risk posture, compliance status, audit findings, and KRI trends using OneTrust analytics.​</li><li><b>Cross-Platform Experience:</b> Support integration and migration activities involving other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate, or Diligent for client engagements.</li><li><b>Stakeholder Support:</b> Respond to customer security questionnaires (SIG, CAIQ), due diligence requests, and compliance inquiries; collaborate with IT, InfoSec, Legal, and business teams.</li></ul><p>QualificationsExperience</p><p>2&ndash;3 years of hands-on experience in GRC operations, compliance, risk management, or information security with demonstrated proficiency in OneTrust GRC platform administration and configuration.</p><p>Technical Skills</p><ul><li>Advanced hands-on experience with OneTrust GRC platform including risk management, audit management, policy management, control mapping, workflows, and Athena AI automation.</li><li>Familiarity with other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate Risk Cloud, or Diligent GRC.</li><li>Experience with compliance frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, NIST, and privacy regulations.</li><li>Proficiency in risk assessment methodologies, control frameworks, and evidence management.</li><li>Knowledge of SSO (SAML 2.0), SCIM, role-based access controls (RBAC), and API integrations.​</li><li>Strong Excel skills for risk registers, reporting, and data analysis.</li></ul><p>Preferred Certifications</p><ul><li>OneTrust Certified GRC Administrator or OneTrust GRC User Certification</li><li>Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC)</li><li>ISO 27001 Lead Implementer/Auditor</li><li>Certified Data Privacy Solutions Engineer (CDPSE)</li><li>CompTIA Security+ or equivalent</li></ul><p>Education</p><p>Bachelor's degree in Computer Science, Information Security, Cybersecurity, Business Administration, or a related field.</p><p>Soft Skills</p><ul><li>Strong analytical and problem-solving skills for risk identification and compliance gap analysis.</li><li>Excellent written and verbal communication for policy documentation and stakeholder interactions.</li><li>Detail-oriented with ability to manage multiple tasks and deadlines.</li><li>Collaborative team player comfortable working with cross-functional teams.</li></ul><p>Additional Requirements</p><ul><li>Experience responding to customer security questionnaires and due diligence requests.</li><li>Understanding of GRC maturity models and continuous improvement processes.</li><li>Ability to work in fast-paced consulting environment supporting multiple client engagements.</li></ul><p>Resume Information</p><p>How to Apply</p><p>Email your resume to job2026@thefourthcommand.com<br/><b>Subject:</b> FC_GRC_ANALYST_[YOUR NAME]_RESUME</p><p>Resume Requirements</p><ul><li>OneTrust GRC hands-on experience with specific modules used (risk, audit, policy, etc.).</li><li>List of GRC platforms administered (OneTrust primary, others secondary).</li><li>Compliance frameworks implemented or supported.</li><li>Relevant certifications with dates.</li><li>Passport size photo (mandatory).</li></ul><p>Incomplete applications will not be considered.</p><p>Job Type: Full-time</p><p>Pay: AED300,000.00 - AED800,000.00 per year</p><p>Work Location: In person</p>

GRC Analyst

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
<br><div><h2 class="jobSectionHeader"><b>About Cyber Force</b></h2>
<p>
Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.</p>
<h2 class="jobSectionHeader"><b>
Role Overview</b></h2>
<p>
We are looking for a Junior GRC Analyst to join our Cyber Risk, GRC &amp; Regulatory team. You will support delivery of governance, risk, and compliance engagements for international clients &mdash; conducting gap analyses, developing policies, executing risk assessments, supporting audits, and mapping controls across ISO 27001, NIST, PCI DSS, SOC 2, and more. This is a consultancy delivery role: real client projects from day one.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<ul><li>Conduct gap analyses against ISO/IEC 27000 family (27001, 27002, 27005, 27701) and support remediation plans</li>
<li>Develop, review, and maintain information security policies, standards, and procedures</li>
<li>Execute risk assessments: identify threats/vulnerabilities, evaluate likelihood/impact, maintain risk registers</li>
<li>Support internal and external audits: gather evidence, review controls, track findings</li>
<li>Conduct vendor and third-party risk assessments</li>
<li>Map and crosswalk controls across ISO 27001, NIST CSF v2, NIST SP 800-53, PCI DSS, SOC 2</li>
<li>Develop Statements of Applicability (SoA), BCPs, and ISMS documentation</li>
<li>Prepare client deliverables: gap reports, risk outputs, policy docs, compliance summaries</li>
<li>Leverage AI tools (Claude, ChatGPT) for research, policy drafting, control mapping</li>
<li>Collaborate with SOC, offensive security, and architecture teams on control validation</li>
</ul><h2 class="jobSectionHeader"><b>Requirements</b></h2>
<ul><li>Bachelor&rsquo;s in Cybersecurity, Information Security, IT, Computer Science, or related</li>
<li>0&ndash;1 year in GRC, information security, compliance, or IT audit (internships count)</li>
<li>Solid understanding of the ISO/IEC 27000 family (27001, 27002, 27005) &mdash; a must</li>
<li>Familiarity with NIST CSF v2, RMF, SP 800-53 &mdash; highly preferred</li>
<li>Familiarity with PCI DSS and SOC 2 &mdash; highly preferred</li>
<li>Fluent English (written and spoken)</li>
<li>Demonstrated experience using LLM-based tools (Claude, ChatGPT) &mdash; this is a must</li>
<li>Strong technical writing skills</li>
<li>CISSP, CASP+, or VICI VCGP &mdash; a major plus</li>
<li>VICI VCGA, Security+, ISC2 CC, ISO 27001 LI/LA, CISA, CRISC &mdash; a plus</li>
<li>GRC platforms (ServiceNow, Archer, OneTrust) &mdash; a plus</li></ul></div>
<br><div><h4 class="jobSectionHeader"><b>Role details</b></h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Junior GRC Analyst

Clay

<div>
 <strong>
  About Clay
  <br/>
  <br/>
 </strong>
 Our mission is to help organizations turn any growth idea into reality.
 <br/>
 <br/>
 We see growth as a creative practice, not a formula. Finding and reaching your best-fit customers takes unique ideas and constant iteration. As AI makes execution faster and tactics easier to copy, creativity is the only lasting advantage. We're already helping thousands of customers &mdash; including Anthropic, Notion, Google, and Ramp &mdash; go to market with unique data, signals, and AI research.
 <br/>
 <br/>
 In 2025, we raised a $100M Series C backed by world-class investors including Sequoia, CapitalG, and First Round &mdash; and crossed $100M in revenue.
 <br/>
 <br/>
 In 2026, we announced our second employee tender offer in 9 months at a new $5B valuation. We also launched a community equity round, for our customers, agency partners, and club members.
 <br/>
 <br/>
 Some things to know about us:
 <br/>
 <br/>
 <ul>
  <li>
   Our community includes 11,000+ customers, 150+ integration partners, 125+ agencies, 50+ Clay clubs, and 30k members on Slack.
  </li>
  <li>
   Our culture is unique inside and outside of work. Our team members are also DJs, activists, writers, clowns, marathoners, skydivers, psychedelic therapists, social workers, and more.
  </li>
  <li>
   All employees can work for free with world-class coaches who specialize in creativity, management, and more.
  </li>
  <li>
   Our operating principles &mdash; including negative maintenance and non-attached action &mdash; guide our work. Read more about them here.
  </li>
  <li>
   Read about us in the NYT, Forbes, First Round Review, and more.
   <br/>
   <br/>
  </li>
 </ul>
 Hear from our employees directly on our Glassdoor page!
 <br/>
 <br/>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 We are seeking a detail-oriented GRC (Governance, Risk, and Compliance) Analyst with a strong emphasis on privacy to join our team. In this role, you will play a critical part in maintaining our compliance posture by handling regulatory data subject requests, understanding and applying relevant privacy frameworks, assisting with customer security inquiries, and managing remediation efforts through our compliance platform. The ideal candidate is proactive, knowledgeable in privacy regulations, and capable of collaborating with cross-functional teams to uphold data security and compliance standards.
 <br/>
 <br/>
 <strong>
  Key Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Data Subject Request Management: Execute and optimize processes for handling data subject requests, including data deletion, opt-out from data sharing, and access inquiries, ensuring timely and accurate responses in line with legal requirements
  </li>
  <li>
   Privacy and Compliance Expertise: Stay current with and interpret various privacy and compliance frameworks (e.g., GDPR, CCPA/CPRA, and applicable state laws) to guide company practices and ensure ongoing adherence
  </li>
  <li>
   Customer Security Support: Assist in responding to security and privacy questionnaires from prospective and existing customers, with a particular focus on privacy, data protection, and compliance-related questions
  </li>
  <li>
   Compliance Maintenance and Remediation: Monitor and maintain compliance using our platform (Vanta), including uploading evidence of controls, refreshing policies as needed, and escalating technical issues to engineering teams for remediation when flagged
  </li>
  <li>
   Third-Party Risk Management: Work with our partners and vendors to identify and monitor third-party risk, and guide them to improve over time
  </li>
  <li>
   Risk Assessment and Reporting: Conduct regular reviews of privacy risks, contribute to internal audits, and prepare reports on compliance status for leadership
  </li>
  <li>
   Cross-Functional Collaboration: Work closely with legal, engineering, and customer success teams to integrate privacy-by-design principles and resolve compliance gaps efficiently
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree in Information Security, Law, Business, or a related field; relevant certifications (e.g., CIPP, CIPM, or CISSP) are highly preferred
  </li>
  <li>
   2+ years of experience in GRC, privacy, or compliance roles, ideally in a SaaS or tech environment handling sensitive personal data
  </li>
  <li>
   2+ years of experience in managing high-volume data subject access requests (DSARs) and opt-out processes under GDPR, CCPA, and similar regulations
  </li>
  <li>
   Familiarity with compliance tools like Vanta or similar platforms for evidence management and policy updates
  </li>
  <li>
   Experience responding to customer security questionnaires and vendor risk assessments
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Required Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Strong understanding of global privacy laws and frameworks, with the ability to apply them practically
  </li>
  <li>
   Excellent analytical and problem-solving skills, with attention to detail in documenting processes and evidence
  </li>
  <li>
   Proficiency in escalating technical compliance issues and collaborating with engineering teams
  </li>
  <li>
   Effective communication skills for interacting with customers, stakeholders, and internal teams
  </li>
  <li>
   Ability to work independently in a fast-paced environment while prioritizing compliance tasks
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred Skills
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Knowledge of additional compliance standards (e.g., ISO 27001, SOC 2)
  </li>
  <li>
   Experience with data mapping, privacy impact assessments (PIAs), or incident response in a privacy context
  </li>
  <li>
   Technical aptitude for understanding SaaS infrastructure and data flows
   <br/>
   <br/>
  </li>
 </ul>
 Compensation Range: $100K - $150K
 <br/>
 <br/>
</div>


GRC Analyst, Privacy

Alignerr

<div>
 <strong>
  Governance, Risk &amp; Compliance (GRC) Analyst (AI Training)
  <br/>
  <br/>
 </strong>
 <strong>
  About The Role
  <br/>
  <br/>
 </strong>
 We partner with the world's leading AI research teams and labs to build and train cutting-edge AI models. Right now, we're looking for experienced GRC professionals to help us develop high-quality datasets and evaluation frameworks for security and risk reasoning.
 <br/>
 <br/>
 Your real-world expertise in compliance programs, security policies, audits, and risk management will directly shape how AI understands and reasons about these critical domains. This is a rare opportunity to apply your professional knowledge to one of the most consequential technology challenges of our time &mdash; on your own schedule, from anywhere in the world.
 <br/>
 <br/>
 <ul>
  <li>
   Organization: Alignerr
  </li>
  <li>
   Type: Hourly Contract
  </li>
  <li>
   Location: Remote
  </li>
  <li>
   Commitment: 10&ndash;40 hours/week
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  What You'll Do
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Review and analyze security policies, controls, and procedures for accuracy and completeness
  </li>
  <li>
   Classify and evaluate real-world compliance scenarios across frameworks such as SOC 2, ISO 27001, and NIST
  </li>
  <li>
   Assess risk statements, control mappings, and audit-style documentation
  </li>
  <li>
   Generate and validate training and evaluation data used to improve AI reasoning in GRC contexts
  </li>
  <li>
   Provide structured, precise written feedback that helps AI systems learn from practitioner-level expertise
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Who You Are
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   2+ years of hands-on experience in GRC, compliance, risk management, or information security
  </li>
  <li>
   Familiar with one or more major frameworks &mdash; SOC 2, ISO 27001, NIST CSF, PCI-DSS, or similar
  </li>
  <li>
   Comfortable reading, interpreting, and critiquing policy and audit-style documentation
  </li>
  <li>
   Detail-oriented with strong written reasoning and communication skills
  </li>
  <li>
   Self-motivated and reliable when working independently on asynchronous tasks
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Nice to Have
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Prior experience with data annotation, data quality review, or AI evaluation workflows
  </li>
  <li>
   Background in internal audit, third-party risk management, or security consulting
  </li>
  <li>
   Familiarity with AI safety or responsible AI concepts
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Why Join Us
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Work directly on frontier AI systems alongside top research labs
  </li>
  <li>
   Fully remote and flexible &mdash; work on your own schedule
  </li>
  <li>
   Freelance perks: autonomy, variety, and global collaboration
  </li>
  <li>
   Make a meaningful impact by teaching AI to reason about security and compliance the way real practitioners do
  </li>
  <li>
   Potential for ongoing work and contract extension
  </li>
 </ul>
</div>


Governance, Risk & Compliance (GRC) Analyst

Cognizant

<div><p>00068005141</p>
<ul><li>Date published <b>Mar 30 2026</b>
</li><li>Location <b>Riyadh</b><b> / </b><b>Saudi Arabia</b>
</li><li>Job category <b>Technology &amp; Engineering</b>
</li><li>Work model <b>Work from Office</b>
</li></ul><p></p><div><div><div><div><div><div><h3 class="jobSectionHeader"><b>Role Overview</b></h3><p>
As an Archer GRC Trainee, you will support the implementation, administration, and reporting of GRC solutions while learning industry best practices and compliance frameworks. The role offers structured learning and exposure to real‑world GRC operations.</p></div><p></p><div><h3 class="jobSectionHeader"><b>
</b><b>Key Responsibilities</b></h3><ul><li>
Assist in the configuration and administration of RSA Archer eGRC modules</li><li>
Support GRC activities such as risk assessments, compliance tracking, and issue management</li><li>
Create and maintain Archer searches, reports, and dashboards</li><li>
Help manage Archer users, roles, workflows, and access controls</li><li>
Support data analysis and reporting for risk and compliance insights</li><li>
Assist in documenting GRC processes, system configurations, and procedures</li><li>
Collaborate with internal teams to gather requirements and support GRC initiatives</li></ul></div><h3 class="jobSectionHeader"><b>
</b></h3><h3 class="jobSectionHeader"><b>General Qualification Requirements</b></h3><ul><li>
Bachelor&rsquo;s degree in Computer Science (or related field)</li><li>
Ability to develop and build applications (web or low‑code) with hands‑on exposure</li><li>
Good understanding of the software development lifecycle (SDLC)</li><li>
Strong communication skills and ability to work in a team environment</li><li>
Willingness to learn continuously, accept feedback, and grow professionally</li></ul></div>
<p></p><p><b>The Cognizant community:</b>
<br>
We are a high caliber team who appreciate and support one another. Our people uphold an energetic, collaborative and inclusive workplace where everyone can thrive.</p>
<ul>
<li>Cognizant is a global community with more than 300,000 associates around the world.</li>
<li>We don&rsquo;t just dream of a better way &ndash; we make it happen.</li>
<li>We take care of our people, clients, company, communities and climate by doing what&rsquo;s right.</li>
<li>We foster an innovative environment where you can build the career path that&rsquo;s right for you.</li>
</ul>
<p><b>About us:</b>
<br>
Cognizant is one of the world's leading professional services companies, transforming clients' business, operating, and technology models for the digital era. Our unique industry-based, consultative approach helps clients envision, build, and run more innovative and efficient businesses. Headquartered in the U.S., Cognizant (a member of the NASDAQ-100 and one of Forbes World&rsquo;s Best Employers 2025) is consistently listed among the most admired companies in the world. Learn how Cognizant helps clients lead with digital at www.cognizant.com</p>
<p>
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.</p>
<p>
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email CareersNA2@cognizant.com with your request and contact information.</p>
<p><i>
Disclaimer:
</i><br>
<i>Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.</i></p>
<p><i>
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.</i></p><br>
</div></div><div><div><div>
<div><p> </p><p>d</p></div></div></div></div></div></div></div><div></div>

Archer GRC - Programmer Analyst Trainee

<div>Job Description:<div></div><div><div><b><br>
GRC Security Analyst</b></div><div><b>
Salary: $105,000 - $115,000 DOE</b></div><div><b>
Remote: Greenwood Village</b></div><div></div><div><br>
The GMR Cyber Security Governance, Risk, and Compliance (GRC) Specialist will have a strong understanding of GRC concepts and solutions, and ability to adapt to new technologies, processes, and policies. This individual will participate in planning, developing, implementing, and evaluating policies and procedures for GRC cyber security workstreams and projects. They will help document cyber security risks and associated remediation plans for security compliance, support client and internal security risk assessment, contract review, vendor assessment, security exception processing and related project deliverables to IT partners, auditors, and stakeholders. This individual will have broad IT experience, familiarity with cybersecurity application and infrastructure concepts; experience in healthcare is strongly preferred.</div><div></div><div><b><br>
Responsibilities:</b></div><br>
<div></div><ul><li>
Execute activities to support GRC workstreams and related projects for internal and external security assessment, security vendor/supplier assessment, contract and security policy and risk evaluation and exceptions.</li><li>
Assist in performance of risk analyses and remediation requirements through activities such as the following:</li><li><ul><li>
Respond to business and client assessment and audit requests</li><li>
Participate with Integration Management Office or others to respond to RFI/RFP requests</li><li>
Conduct research, document, and evaluate threats, risk impact, risk likelihood, and recommended remediation.</li><li>
Gather technical, administrative, physical security or other enterprise information related to threats, existing controls, and residual risks</li></ul></li><li>
Perform Vendor Risk and Compliance assessments and communicate remediation requirements.</li><li>
Collaborate with Business, Legal, Compliance, IT, client and other stakeholders to oversee review and provide security requirements and revisions for contracts, ISA, and BAA agreements.</li><li>
Partner to create and maintain GMR policies, standards and procedures to safeguard the integrity of and access to GMR systems, files, and data elements and communicate regulatory and security framework requirements.</li><li>
Analyze security policy compliance and development of information security policy exceptions including coordinating interviews, evidence collection and responses from appropriate subject matter experts, and approvals.</li><li>
Partner with GMR security engineers to evaluate and recommend information technology and information security products, services, and processes to reduce risk and maintain compliance with applicable policies, mandates, laws, and regulations.</li><li>
Maintain knowledge of changing technologies, and provide recommendations for adaptation of new technologies, processes, or policies (for example, the use of AI and related security requirements).</li><li>
Assist in development and delivery of required information technology and security awareness training and annual updates for GMR Workforce.</li><li>
Provide GRC and information security expertise and functional delivery for projects, risk analysis, product, vendor RFI/RFP, IMO and regulatory or other initiatives aligned to other GMR organizations. Be the trusted champion of new security technologies.</li><li>
Support GMR audits and Privacy and Compliance programs and other compliance programs as applicable.</li><li>
Progress job knowledge by tracking and understanding emerging security practices and standards, maintaining credentials, participating in educational opportunities, reading professional publications, developing professional networks, and participating in professional organizations.</li><li>
May coordinate work of others, fostering teamwork and cooperation.</li><li>
Perform other security-related duties as assigned</li></ul><div></div><div><b><br>
Education/Licensing/Certification:</b></div><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security and Assurance, Risk Management, Information Systems, Security Engineering or related major. Four years of security related experience can be substituted.</li><li>
CISA, CISSP, or CRISC certification (or passing of test) is preferred.</li></ul><div><b>
Skills:</b></div><ul><li>
Knowledge of IT Security Governance, Risk, and Compliance (GRC) concepts and ability to perform risk assessment evaluations.</li><li>
A broad-based understanding of Information Technology, Information Security, and Risk identification and evaluation that spans technical, administrative, physical, and operational security domains.</li></ul><ul><li>
Experience with related domains e.g. Disaster Recovery and Business Continuity, Audit preparation and response, and IT Security and Risk Training, or other.</li><li>
Ability to collaborate with individuals across business and IT domains, and at all levels of the organization.
</li></ul><div> Note &ndash; the next item was missing a bullet.
</div><ul><li>Interprets internal and external business requirements and issues and recommends best practices.</li><li>
Possesses strong analytical ability, consultative skills, strong judgment and the ability to work effectively in a cross-functional, multi-disciplinary, hybrid remote or in person team environment.</li><li>
Ability to adjust to changing priorities and multitask effectively.</li><li>
Ability to assess, comprehend, and communicate complex information including technical and compliance concepts.</li><li>
Requires strong verbal and written communication skills to effectively communicate with all levels of the organization.</li><li>
Proven ability to understand and develop expertise on new regulatory, compliance and security technologies quickly.</li><li>
Well organized with excellent follow up skills and proven ability to meet deadlines.</li><li>
Experience with metrics gathering and reporting processes</li></ul><div></div><div><b><br>
Minimum Required Qualifications</b></div><ul><li>
A minimum of 2 years of experience related to areas of position responsibilities</li><li>
A minimum of 2 years information security work experience</li><li>
GRC Healthcare Industry experience strongly preferred</li><li>
Working knowledge of compliance frameworks, security and privacy management standards and related certifications e.g., NIST CSF,800-171 and 800-53, NIST AI Framework, FedRAMP, HIPAA, HITRUST, PCI DSS, IT General Controls (ITGC), SOC2, ISO 27001, COBIT or others</li><li>
Experience with Cloud based IT Security concepts and solutions</li><li>
Experience performing risk assessment tasks, and risk assessment platforms and tools e.g., Allgress, RSA Archer, CORL Toolkit, or other</li><li>
Exposure to Identity, Credential, and Access Management (ICAM) platforms, tools and concepts is helpful</li></ul></div><div></div><div><div><div><p><br>
Why Choose GMR? Global Medical Response (GMR) and its family of solutions are dedicated to delivering compassionate, quality medical care, primarily in the areas of emergency and patient relocation services. Here you&rsquo;ll embark on meaningful work that will make an impact on you and the customers we serve. View the stories on how our employees provide care to the world at www.AtaMomentsNotice.com.</p></div><p></p><div><p><br>
GMR&rsquo;s Core Behaviors&mdash;keep care at the center, raise your hand, seek to understand, find a way together and be accountable&mdash;unite our teams and set us apart in emergency medical services.</p></div></div></div>
EEO Statement:
<p>
Global Medical Response and its family of companies are an Equal Opportunity Employer, which includes supporting veterans and providing reasonable accommodations for individuals with a disability.</p>
More Information about this Job:
<div>
Check out our careers site <i>benefits page</i><i> </i>to learn more about our benefit options.</div></div>

Security GRC Security Analyst

Accenture

<div><p><b>Cybersecurity GRC (Strategy) Intern</b></p><h2 class="jobSectionHeader"><b>
Location</b></h2><p>
Riyadh, Saudi Arabia</p><p></p><h2 class="jobSectionHeader"><b>
Internship Overview</b></h2><p>
We are looking for a motivated and detail‑oriented <b>Cybersecurity GRC (Strategy) Intern</b> to join our Governance, Risk, and Compliance team. This internship is designed to provide exposure to cybersecurity strategy, risk management, regulatory compliance, and security governance activities. The intern will work alongside experienced GRC and cybersecurity professionals and gain practical experience supporting strategic and advisory cybersecurity initiatives.</p><p></p><h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2><ul><li>
Support cybersecurity <b>risk assessments</b>, including identifying risks, documenting findings, and tracking remediation actions.</li><li>
Assist in reviewing and maintaining cybersecurity <b>policies, standards, and procedures</b>.</li><li>
Support compliance and self‑assessment activities against cybersecurity frameworks and regulations (e.g., NCA, NIST, ISO 27001).</li><li>
Assist with <b>third‑party risk management</b> activities, including documentation reviews and risk tracking.</li><li>
Support preparation for internal and external <b>audits</b> by collecting evidence and maintaining compliance documentation.</li><li>
Assist in maintaining <b>risk registers</b>, compliance trackers, and governance dashboards.</li><li>
Conduct research on cybersecurity regulations, best practices, and emerging governance trends.</li><li>
Support reporting and presentations related to cybersecurity posture, risks, and compliance status.</li></ul><p></p><h2 class="jobSectionHeader"><b>
Required Qualifications</b></h2><ul><li>
Currently pursuing or recently completed a Bachelor&rsquo;s degree in <b>Cybersecurity, Information Technology, Information Systems, or a related field</b>.</li><li>
Basic understanding of cybersecurity governance, risk, and compliance concepts.</li><li>
Familiarity with cybersecurity frameworks or standards such as <b>NIST, ISO 27001, or NCA</b>.</li><li>
Strong analytical, documentation, and organizational skills.</li><li>
Good written and verbal communication skills in English (Arabic is a plus).</li><li>
Ability to work in a structured, detail‑oriented, and documentation‑focused environment.</li></ul><p></p><h2 class="jobSectionHeader"><b>
Preferred / Nice‑to‑Have</b></h2><ul><li>
Exposure to cybersecurity risk assessments, compliance reviews, or audit activities.</li><li>
Familiarity with <b>Saudi cybersecurity regulations</b> (e.g., NCA, NDMO).</li><li>
Experience with documentation, reporting, or policy writing.</li><li>
Participation in cybersecurity projects, internships, or academic research related to GRC.</li><li>
Entry‑level certifications or coursework in progress (e.g., ISO 27001, GRCP, Security+).</li></ul><p></p><h2 class="jobSectionHeader"><b>
What You&rsquo;ll Gain</b></h2><ul><li>
Hands‑on experience in cybersecurity <b>governance, risk, and compliance</b> activities.</li><li>
Exposure to cybersecurity strategy and advisory‑focused work.</li><li>
Practical understanding of regulatory and compliance‑driven cybersecurity environments.</li><li>
Experience working with risk registers, policies, and compliance artifacts.</li><li>
Strong foundation for future roles such as <b>Cybersecurity GRC Analyst, Cyber Strategy Analyst, or Risk &amp; Compliance Analyst</b>.</li></ul></div>
<br>
.

Cyber Security New Associate (KSA COOP Internship)

Search 2770+ Grc analyst jobs near you this April. New roles added regularly across leading industries. Apply today.