grc analyst

The Provident Bank of New Jersey

<div>How would you like to join one of the most highly regarded financial institutions in New Jersey with deep roots in the community? Provident is a successful and highly regarded multi-billion dollar bank that continues to grow with branches in New Jersey, Eastern Pennsylvania and New York. Our longevity is a testament to our commitment to placing our employees, customers, and the communities we serve at the center of all we do. At Provident Bank, we are committed to enhancing our customer and employees&rsquo; experience. 
POSITION SUMMARY
The GRC Analyst will collaborate with process owners, internal auditors, external auditors, and other stakeholders to assist in reviewing, monitoring, and resolving findings. This includes helping the team manage SOX and GLBA Compliance programs.
The GRC Analyst will support the implementation of internal and external assessments, assist with compliance audits, and ensure compliance with existing and emerging regulations and standards including GLBA, SOX, and other GRC activities.
KEY RESPONSIBILITIES<ul><li>
Gather relevant evidence to support annual testing for internal and external audits. Maintain and monitor a central repository for audit evidence. Ensure timely and accurate response to internal and external audit requests.</li><li>
Provide training and guidance to employees and other stakeholders on cybersecurity best practices and awareness including but not limited to: 
<ul><li>New Hire Training,</li><li>Monthly cybersecurity newsletters and phishing campaigns,</li><li>Administration of the Cybersecurity Compliance training program</li></ul></li><li>
Gather relevant evidence and documentation to support risk assessments using various frameworks to identify control ratings, strengths, potential gaps and action plans.</li><li>
Leverage the Bank&rsquo;s GRC platform to document and manage security exceptions, violations, incidents, and other risk concerns to closure.</li><li>
Maintain up-to-date documentation of procedures and methods that serve to broaden team knowledge and industry expertise.</li><li>
Assist GRC Manager with maintaining security standards, policies, and practices on an annual basis to make sure they reflect the current environment</li><li>
Collaborate with business lines to help satisfy new and existing regulatory obligations.</li></ul>
SUPERVISORY RESPONSIBILITIES
 None. 
MINIMUM SKILLS REQUIRED<ul><li>
1-3 years&rsquo; experience in cybersecurity with exposure with various security frameworks.Understanding of cybersecurity governance frameworks, Sarbanes Oxley (SOX) compliance requirements and IT General Controls (ITGC)</li><li>
Information Security Governance experience or related training</li><li>
Detail oriented with good organizational skills</li><li>
Effective written and verbal communication skills</li><li>
Intermediate proficiency with Microsoft Office</li></ul>
 EDUCATION<ul><li>
Associates Degree Required</li></ul> 
LICENSES AND/OR CERTIFICATES<ul><li>
Information Security Certification desirable</li></ul> 
WORKING CONDITIONS
 Work is performed in a normal office environment. Noise levels are usually moderate. 
WORKING CONDITIONS
Work is performed in a normal office environment. Noise levels are usually moderate. 
HAZARDS
The hazards are mainly those present in a normal office setting.
This job description may not be all-inclusive. Employees are expected to perform other duties as assigned and directed by management. Job descriptions and duties may be modified when deemed appropriate by management. 
Provident Bank recognizes and supports the importance of creating a socially and culturally diverse employee base. We understand, value, and appreciate the unique perspectives that a diverse workforce can contribute to our organization. We put the employee and the customer at the center of strategy because culture is a critical differentiator for why people choose to work here. 
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age 40 and over, color, disability, gender identity, genetic information, military or veteran status, national origin, race, religion, sex, sexual orientation or any other applicable status protected by state or local law. 
Pay Details:&#65440;$32.21- $40.26 per hour&#65440;&#65440;&#65440;&#65440;&#65440;&#65440; 
Please note, the base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, education, geographic location, internal equity, and other applicable business and organizational needs. This role is incentive eligible based upon company, business, and/or individual goal achievement and performance. 
 &#65440;&#65440;&#65440;&#65440;&#65440;&#65440;&#65440; 
Team members accrue paid time-off (PTO), receive Holiday (PTO) and are eligible to participate in the bank&rsquo;s Health and Wellness benefits including Medical, Dental and Vision Plans, Flexible and Health Savings Accounts, and a 401(k) Retirement Plan. In addition, the company provides Disability Insurance, an Employee Assistance Program, and Basic Life Insurance. Company sponsored Tuition Disbursement and Loan Repayment programs are also available. Voluntary benefits include Supplemental Life Insurance, Accident, Critical Illness, Hospital Indemnity and Legal plans. 
#LI-Hybrid</div>

GRC Analyst

Leidos

Description <ul><li> We're a ' Family Friendly ' certified w orkplace - we understand the diverse roles our team members need to play within their own unique family setting and actively support them. </li></ul> O ur team feel Leidos is a g reat p lace to w ork . L earn more about our culture and benefits by visiting us here Do Work That Matters Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life . Our 2000 local experts, backed by our global experience and network of partners, are working to solve the world's toughest challenges in government, intelligence, defence, aviation, border protection and health markets. Your New Role and Responsibilities As a Cyber Security GRC Analyst, you will be responsible for contributing cyber security subject matter expertise and advice to stakeholders and the broader team through analyses and intersection of the governance, risk, and compliance aspects of systems. This is an interesting role with broad responsibilities and scope that will allow you to test and hone your skills, whilst contributing to National Security, your responsibilities will include the following; <ul><li> Evaluate the effectiveness of security controls against the Australian Government ISM, Essential Eight, Cyberworthiness , NIST, other approved cyber security frameworks, and standard designs. </li><li> Conduct security, gap, and compliance audits, including reporting and documentation management. </li><li> Maintain, verify, and update accreditation documentation sets for each environment on an ongoing basis. </li><li> Develop and submit high-quality artefacts in a timely manner , including risk assessments, security documentation, and compliance reports. </li><li> Apply cyber security governance, risk, and compliance principles in practice, including preparation of risk registers, security plans, and audit results. </li></ul> What You'll Bring to Make An Impact <ul><li> Demonstrated customer focus and motivation to deliver outcomes aligned with customer mission needs, supported by relevant education and/or practical experience. </li><li> Over two years' experience in Cybersecurity GRC, audit, risk, or compliance roles, with proven ability to produce high-quality security assessment documentation. </li><li> Familiarity with risk management frameworks including ISO 31000, FAIR, OCTAVE, and NIST RMF, and holding certifications such as CRISC, CISM, CISA, CISSP, ISO 27001 or similar. </li><li> Excellent communication and stakeholder management skills, with strong attention to detail and sound organisational abilities. </li><li> Experience working with Defence is desirable. </li></ul> Don't worry if you don't tick all the boxes - if you meet most of them, we encourage you to submit your application . We're most interested in your strengths, what you want to learn and how far you want to go. Successful candidates will be required to be Australian Citizens and hold and maintain a minimum NV-2 Australian Government Security Clearance. Di verse Team Members , Shared Values and a Common Purpose Providing our customers with smarter solutions takes an incredible team with diversity of thought, experience and perspectives d riving innovation. Inclusion is at the heart of our culture and is one of our core values . I t's about creating a workplace where everyone can do important work, feels welcome, valued , and respected, and has equal access to opportunities to thrive. Paul Chase - Chief Executive , Leidos Australia. Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace . We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups. Our five A dvocacy G roups (Women and Allies Network, Young Professionals, Defence & Emergency Services, Action for Accessibility and Abilities and Pride+) provide an opportunity for team members to connect and collaborate on shared interests, and work to support and celebrate our diverse community . Next Steps <ul><li> To apply for this role, follow the links or apply via our Careers page. </li><li> Recruitment process - interviews a nd background checks . </li><li> Applicants may also need to meet International Traffic in Arms Regulations (ITAR) requirements. In certain circumstances this can place limitations on persons who hold dual nationality, permanent residency or are former nationals of certain countries as per ITAR 126.1. </li><li> We are committed to making our recruitment process accessible to all candidates. Please contact our C areers team if you 'd like to discuss any additional support during your application or throughout the recruitment process . </li></ul> At Leidos, we don't want someone who "fits the mold"-we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now." If you're already scheming step 20 while everyone else is still debating step 2 good. You'll fit right in. Original Posting: For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at . Securing Your Data Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission . Commitment to Non-Descrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Cyber Security GRC Analyst

American Express Saudi Arabia

<div>
 
 
 Company Description
 
 
 
 American Express Saudi Arabia, established in 1999, is a leading financial company in the Kingdom, renowned for delivering excellence and innovative payment solutions. Our mission is to empower individuals and businesses to progress through advanced payment solutions like Credit Cards, Charge Cards, and other services tailored to fit diverse needs. We lead the Card Business Payment sector, helping customers manage expenses and cash flow effectively. Join us to be part of a team that provides world-class experiences and business success.
 
 
 
 
 
 
 About the Role:&nbsp;
 
 
 We are seeking a motivated and detail-oriented Cybersecurity GRC Specialist to join our growing cybersecurity team. The ideal candidate will play a key role in developing and delivering cybersecurity awareness and training programs, supporting internal audits, assisting with third-party risk management and contributing to risk management initiatives. This role offers the opportunity to work across various cybersecurity governance, risk and compliance areas while developing your career in the dynamic field of cybersecurity.
 
 
 
 
 
 
 
 
 
 
 Key Responsibilities include
 
 
 :
 
 
 <ul>
 <li>
 Assist in identifying, assessing, and reporting cybersecurity risks across the organization.
 </li>
 <li>
 Support the development and maintenance of risk registers, tracking identified risks, and assisting in risk mitigation strategies.
 </li>
 <li>
 Support the planning and execution of internal cybersecurity audits to assess adherence to cybersecurity and regulatory requirements.
 </li>
 <li>
 Assist in preparing audit documentation, audit reports, and follow-up on audit findings with relevant departments.
 </li>
 <li>
 Conduct periodic reviews of third-party cybersecurity posture and assist in monitoring vendor performance in relation to compliance and risk management requirements.
 </li>
 <li>
 Collaborate with the procurement and legal teams to ensure third-party cybersecurity requirements are adequately addressed in vendor contracts and service level agreements (SLAs).
 </li>
 <li>
 Design, develop and implement cybersecurity awareness and training programs in alignment with international standards and regulations (e.g., ISO 27001, NCA, SAMA, PCI DSS).
 </li>
 <li>
 Deliver periodic cybersecurity awareness sessions (online and/or in person). Monitor employee engagement and completion.
 </li>
 <li>
 Track and report on training &amp; phishing metrics to measure effectiveness and to identify risky areas for improvement.
 </li>
 <li>
 Plan and manage phishing simulations and analyze results.
 </li>
 <li>
 Governance of User Violations and Disciplinary Measures
 </li>
 <li>
 Maintain consistent communication about threats, trends, and best practices.
 </li>
 <li>
 Perform other duties as assigned by the GRC Manager.
 </li>
 </ul>
 
 
 
 
 
 Necessary Documents to Submit
 
 
 :
 
 
 <ul>
 <li>
 Resume/CV
 </li>
 <li>
 Bachelor's degree in computer science, information security or a related field.
 </li>
 <li>
 Relevant certifications (e.g., CompTIA Security+, ISO 27001 Foundations).
 </li>
 </ul>
 
 
 &nbsp;
 
 
 
 
 Why Join AMEX
 
 
 :
 
 
 <ul>
 <li>
 Working at American Express Saudi Arabia offers a unique opportunity to be part of a global brand with strong local presence. Employees benefit from competitive salaries, continuous training, and professional growth. The company fosters an inclusive and innovative work culture, led by strong leadership and a clear vision. With a focus on digital transformation and social responsibility, AMEX is a place where talent is valued and empowered.
 </li>
 </ul>
 
 
 
</div>

Cybersecurity GRC Analyst

Teamficient

Information Security &amp; GRC Analyst (Mid-Level)Company: TeamFicient Location: Remote Employment Type: Full-Time Salary Range: To be discussed (Negotiable for highly experienced candidates)Work Schedule:<ul><li>Time Range: Between 7 AM &ndash; 7 PM CST (Graveyard shift)</li><li>Working Hours: 9 hours per day (8 working hours + 1-hour break)</li><li>Days Off: TBD (2 days per week)</li></ul>Why Join Us?<ul><li>Competitive salary based on experience.</li><li>Opportunity to grow within an international, people-first organization.</li><li>Supportive work environment that values innovation, inclusion, and career growth.</li></ul>Position OverviewThis role bridges Information Security Governance and Technical Compliance for our MDR + Compliance platform.The Information Security &amp; GRC Analyst ensures alignment with frameworks such as ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, and PCI DSS, translating requirements into technical implementation tasks for engineering teams and maintaining audit readiness.Key Responsibilities<ul><li>Build and maintain the Control Matrix and Statement of Applicability across frameworks.</li><li>Perform risk and gap assessments, maintain the risk register, and treatment plans.</li><li>Map framework controls to technical configurations (Azure, AWS, EDR, CI/CD).</li><li>Collect and validate audit evidence (logs, reports, approvals, tickets).</li><li>Draft and update policies: Access Control, Incident Response, Secure Development, and Vendor Risk Management.</li><li>Support data privacy and AI governance tasks (LLM usage, data segregation).</li><li>Prepare for external audits and track corrective actions.</li><li>Conduct internal security awareness training sessions.</li></ul>Qualifications &amp; Must-Haves<ul><li>3&ndash;5 years of experience in Information Security or GRC.</li><li>Deep knowledge of ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS.</li><li>Familiar with cloud security controls (Azure Defender, AWS Security Hub).</li><li>Strong documentation, communication, and policy writing skills.</li><li>Experience using compliance automation tools (Drata, Vanta, Secureframe).</li></ul>Tech Stack &amp; Frameworks:<ul><li>ISO 27001, SOC 2 Type II, NIST CSF 2.0, GDPR, HIPAA, PCI DSS, ADHICS, Azure Security Center, AWS Config, Drata, Vanta, ClickUp, Google Workspace</li></ul>Education:<ul><li>Bachelor&rsquo;s or Master&rsquo;s in Information Security, Computer Science, or Cybersecurity Governance.</li><li>ISO 27001 Lead Implementer/Auditor or equivalent certification preferred.</li></ul>Technical/System Requirements<ul><li>Desktop or laptop with Intel Core i7 / i9 or AMD Ryzen 7 / 9 (or higher) processor</li><li>Minimum 32GB RAM for multitasking and large file handling</li><li>NVIDIA RTX or AMD Radeon Pro graphics card (recommended)</li><li>Workstation free from noise and distractions</li><li>Stable primary internet connection and backup internet</li><li>USB headset with noise-cancelling microphone</li><li>Backup power source (generator, UPS, or accessible alternative workspace during outages)</li></ul>This is a long-term opportunity for an experienced IT professional who is ready to take on a leadership role in a fast-paced, global organization.Join TeamFicient and help build efficient, secure, and scalable IT operations that empower teams to perform at their best.Job Type: Full-timeApplication Question(s):<ul><li>What is your expected monthly salary for this position (in PKR)?</li></ul>Work Location: Remote

(REMOTE) Information Security & GRC Analyst (Mid-Level)

SuperNova Solutions Pvt. Ltd.

Position Title: GRC Officer / SpecialistWe are seeking a proactive and detail-oriented GRC Officer / Analyst / Specialist to join our Governance, Risk &amp; Compliance (GRC) team. The ideal candidate will play a key role in ensuring that our SAP systems, processes, and IT operations comply with international governance, security, and risk management standards.Key Responsibilities:<ul><li>Conduct IT and SAP-related risk assessments, ensuring alignment with corporate governance frameworks</li></ul><ul><li>Support SAP GRC module configuration and compliance monitoring activities</li></ul><ul><li>Maintain and update ISO 27001, SOC 2, and SAP security compliance documentation</li></ul><ul><li>Monitor risk registers and ensure adherence to IT security and data protection policies</li></ul><ul><li>Participate in internal audits, SAP access reviews, and client compliance assessments</li></ul><ul><li>Prepare audit evidence, compliance reports, and risk documentation related to SAP environments</li></ul><ul><li>Collaborate with cross-functional teams (Basis, Security, and Functional Consultants) to ensure SAP compliance</li></ul>Required Skills &amp; Qualification:* Education: Bachelor&rsquo;s degree in Computer Science, Information Systems, or Business Administration* Experience: 2&ndash;4 years in IT compliance, audit, or risk management (experience with SAP systems or GRC tools preferred)* Strong understanding of ISO 27001, SOC 2, GDPR, or NIST frameworks* Familiarity with SAP GRC Access Control, Process Control, or Risk Management modules is a plus* Excellent communication, documentation, and analytical skills* Certifications such as SAP GRC, ISO 27001 Lead Implementer, or CISA are advantageousLocation: KarachiTo apply: careers@global-supernova.comSubject Line: GRC Officer / Specialist &ndash; KarachiJob Type: Full-timePay: Rs100,000.00 - Rs180,000.00 per monthWork Location: In person

GRC Officer / Specialist

Search 3033+ Grc analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

3033 grc analyst jobs NEAR_ME

GRC Analyst

Cyber Security GRC Analyst

Cyber Security GRC Analyst

Cybersecurity GRC Analyst

(REMOTE) Information Security & GRC Analyst (Mid-Level)

(REMOTE) Information Security & GRC Analyst (Mid-Level)

GRC Officer / Specialist