risk and compliance specialist

Accenture

<div>
 <strong>
  About Accenture:
  <br/>
  <br/>
 </strong>
 At Accenture, we are committed to driving business success through innovative solutions and collaboration. We empower our people to perform independently, become subject matter experts, and actively contribute to solving work-related challenges. Join us to make a difference in our organization and shape the future of business solutions.
 <br/>
 <br/>
 <strong>
  The Work:
  <br/>
  <br/>
 </strong>
 As an SAP Governance Risk and Compliance Specialist, you will:
 <br/>
 <br/>
 <br/>
 <li>
  Serve as a subject matter expert in SAP Governance Risk and Compliance, contributing to innovative solutions for business challenges.
  <br/>
 </li>
 <li>
  Develop and implement business solutions that align with industry standards and business needs.
  <br/>
 </li>
 <li>
  Deliver functional and application designs that meet current and future requirements.
  <br/>
 </li>
 <li>
  Collaborate with various stakeholders to ensure effective communication and understanding of project goals.
  <br/>
 </li>
 <li>
  Actively participate in discussions and provide insights to enhance project outcomes.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Here&rsquo;s What You Will Need:
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  A minimum of 1 year of experience in relevant related skills.
  <br/>
 </li>
 <li>
  Expert proficiency in SAP Governance Risk and Compliance.
  <br/>
 </li>
 <li>
  A Bachelor's Degree in a relevant field of studies.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Bonus Points If You Have:
  <br/>
  <br/>
  <br/>
 </strong>
 <li>
  Intermediate proficiency in Business Process Analysis.
  <br/>
 </li>
 <li>
  Advanced proficiency in Risk Assessment.
  <br/>
 </li>
 <li>
  Expert proficiency in Compliance Management.
  <br/>
 </li>
 <li>
  Intermediate proficiency in Project Management.
  <br/>
 </li>
 <li>
  Advanced proficiency in Data Analysis.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Why Join Us?
  <br/>
  <br/>
 </strong>
 At Accenture, we offer:
 <br/>
 <br/>
 <br/>
 <li>
  A dynamic and inclusive work environment.
  <br/>
 </li>
 <li>
  Opportunities to work on impactful projects with global teams.
  <br/>
 </li>
 <li>
  Continuous learning and development programs to enhance your skills.
  <br/>
 </li>
 <li>
  A rewarding career path with opportunities for growth and advancement.
  <br/>
  <br/>
  <br/>
 </li>
 <strong>
  Ready to Make an Impact?
  <br/>
  <br/>
 </strong>
 Join us in shaping innovative solutions that drive business success. Apply now and be part of a team that values your expertise and contributions!
 <br/>
 <br/>
</div>


SAP Governance Risk and Compliance Specialist

<div>Job Description:<div></div><div><div><b><br>
GRC Security Analyst</b></div><div><b>
Salary: $105,000 - $115,000 DOE</b></div><div><b>
Remote: Greenwood Village</b></div><div></div><div><br>
The GMR Cyber Security Governance, Risk, and Compliance (GRC) Specialist will have a strong understanding of GRC concepts and solutions, and ability to adapt to new technologies, processes, and policies. This individual will participate in planning, developing, implementing, and evaluating policies and procedures for GRC cyber security workstreams and projects. They will help document cyber security risks and associated remediation plans for security compliance, support client and internal security risk assessment, contract review, vendor assessment, security exception processing and related project deliverables to IT partners, auditors, and stakeholders. This individual will have broad IT experience, familiarity with cybersecurity application and infrastructure concepts; experience in healthcare is strongly preferred.</div><div></div><div><b><br>
Responsibilities:</b></div><br>
<div></div><ul><li>
Execute activities to support GRC workstreams and related projects for internal and external security assessment, security vendor/supplier assessment, contract and security policy and risk evaluation and exceptions.</li><li>
Assist in performance of risk analyses and remediation requirements through activities such as the following:</li><li><ul><li>
Respond to business and client assessment and audit requests</li><li>
Participate with Integration Management Office or others to respond to RFI/RFP requests</li><li>
Conduct research, document, and evaluate threats, risk impact, risk likelihood, and recommended remediation.</li><li>
Gather technical, administrative, physical security or other enterprise information related to threats, existing controls, and residual risks</li></ul></li><li>
Perform Vendor Risk and Compliance assessments and communicate remediation requirements.</li><li>
Collaborate with Business, Legal, Compliance, IT, client and other stakeholders to oversee review and provide security requirements and revisions for contracts, ISA, and BAA agreements.</li><li>
Partner to create and maintain GMR policies, standards and procedures to safeguard the integrity of and access to GMR systems, files, and data elements and communicate regulatory and security framework requirements.</li><li>
Analyze security policy compliance and development of information security policy exceptions including coordinating interviews, evidence collection and responses from appropriate subject matter experts, and approvals.</li><li>
Partner with GMR security engineers to evaluate and recommend information technology and information security products, services, and processes to reduce risk and maintain compliance with applicable policies, mandates, laws, and regulations.</li><li>
Maintain knowledge of changing technologies, and provide recommendations for adaptation of new technologies, processes, or policies (for example, the use of AI and related security requirements).</li><li>
Assist in development and delivery of required information technology and security awareness training and annual updates for GMR Workforce.</li><li>
Provide GRC and information security expertise and functional delivery for projects, risk analysis, product, vendor RFI/RFP, IMO and regulatory or other initiatives aligned to other GMR organizations. Be the trusted champion of new security technologies.</li><li>
Support GMR audits and Privacy and Compliance programs and other compliance programs as applicable.</li><li>
Progress job knowledge by tracking and understanding emerging security practices and standards, maintaining credentials, participating in educational opportunities, reading professional publications, developing professional networks, and participating in professional organizations.</li><li>
May coordinate work of others, fostering teamwork and cooperation.</li><li>
Perform other security-related duties as assigned</li></ul><div></div><div><b><br>
Education/Licensing/Certification:</b></div><ul><li>
Bachelor&rsquo;s degree in Computer Science, Information Security and Assurance, Risk Management, Information Systems, Security Engineering or related major. Four years of security related experience can be substituted.</li><li>
CISA, CISSP, or CRISC certification (or passing of test) is preferred.</li></ul><div><b>
Skills:</b></div><ul><li>
Knowledge of IT Security Governance, Risk, and Compliance (GRC) concepts and ability to perform risk assessment evaluations.</li><li>
A broad-based understanding of Information Technology, Information Security, and Risk identification and evaluation that spans technical, administrative, physical, and operational security domains.</li></ul><ul><li>
Experience with related domains e.g. Disaster Recovery and Business Continuity, Audit preparation and response, and IT Security and Risk Training, or other.</li><li>
Ability to collaborate with individuals across business and IT domains, and at all levels of the organization.
</li></ul><div> Note &ndash; the next item was missing a bullet.
</div><ul><li>Interprets internal and external business requirements and issues and recommends best practices.</li><li>
Possesses strong analytical ability, consultative skills, strong judgment and the ability to work effectively in a cross-functional, multi-disciplinary, hybrid remote or in person team environment.</li><li>
Ability to adjust to changing priorities and multitask effectively.</li><li>
Ability to assess, comprehend, and communicate complex information including technical and compliance concepts.</li><li>
Requires strong verbal and written communication skills to effectively communicate with all levels of the organization.</li><li>
Proven ability to understand and develop expertise on new regulatory, compliance and security technologies quickly.</li><li>
Well organized with excellent follow up skills and proven ability to meet deadlines.</li><li>
Experience with metrics gathering and reporting processes</li></ul><div></div><div><b><br>
Minimum Required Qualifications</b></div><ul><li>
A minimum of 2 years of experience related to areas of position responsibilities</li><li>
A minimum of 2 years information security work experience</li><li>
GRC Healthcare Industry experience strongly preferred</li><li>
Working knowledge of compliance frameworks, security and privacy management standards and related certifications e.g., NIST CSF,800-171 and 800-53, NIST AI Framework, FedRAMP, HIPAA, HITRUST, PCI DSS, IT General Controls (ITGC), SOC2, ISO 27001, COBIT or others</li><li>
Experience with Cloud based IT Security concepts and solutions</li><li>
Experience performing risk assessment tasks, and risk assessment platforms and tools e.g., Allgress, RSA Archer, CORL Toolkit, or other</li><li>
Exposure to Identity, Credential, and Access Management (ICAM) platforms, tools and concepts is helpful</li></ul></div><div></div><div><div><div><p><br>
Why Choose GMR? Global Medical Response (GMR) and its family of solutions are dedicated to delivering compassionate, quality medical care, primarily in the areas of emergency and patient relocation services. Here you&rsquo;ll embark on meaningful work that will make an impact on you and the customers we serve. View the stories on how our employees provide care to the world at www.AtaMomentsNotice.com.</p></div><p></p><div><p><br>
GMR&rsquo;s Core Behaviors&mdash;keep care at the center, raise your hand, seek to understand, find a way together and be accountable&mdash;unite our teams and set us apart in emergency medical services.</p></div></div></div>
EEO Statement:
<p>
Global Medical Response and its family of companies are an Equal Opportunity Employer, which includes supporting veterans and providing reasonable accommodations for individuals with a disability.</p>
More Information about this Job:
<div>
Check out our careers site <i>benefits page</i><i> </i>to learn more about our benefit options.</div></div>

Security GRC Security Analyst

Arab Solutions

<div>
 <strong>
  Job Title:
 </strong>
 GRC Specialist
 <br/>
 <br/>
 <strong>
  Job Descriptions
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Monitor status of risks, and reports status and need for action to senior colleagues.
  </li>
  <li>
   Demonstrate financial awareness as a part of risk management (e.g., cost-effectiveness analysis of proposed counter measures).
  </li>
  <li>
   Assist with development of agreed countermeasures and contingency plans.
  </li>
  <li>
   Collect and collate evidence as part of formally conducted and planned reviews of activities, processes, products, or services, including information and communications technology applications.
  </li>
  <li>
   Examine records as part of specified testing strategies for evidence of compliance with management directives, or the identification of abnormal occurrences.
  </li>
  <li>
   Compare records with expectations arising from the procedures, requirements and/or standards governing the work.
  </li>
  <li>
   Analyze evidence collated and draft&rsquo;s part, or all formal reports commenting on the conformance found to exist in the reviewed part of an information systems environment.
  </li>
  <li>
   Contribute to the collection of evidence and the conduct of formal audits or reviews of activities, processes, data, products, or services.
  </li>
  <li>
   Examine records for evidence that appropriate testing and other quality control activities have taken place and determines compliance with organizational directives, standards and procedures. Inputs findings to compliance reports.
  </li>
  <li>
   Identify non-compliances, non-conformances and abnormal occurrences, and inputs findings to compliance reports.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Mandatory Requirements
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Minimum bachelor&rsquo;s degree level or holds a relevant professional qualification or relevant experience (typically at least 6 years) in a techno management ITSM service management role with widespread knowledge of IT.
  </li>
  <li>
   Educated to bachelor&rsquo;s degree level, holds a relevant professional qualification, and may have a postgraduate qualification such as an MSc, MBA, or other appropriate business, engineering, scientific or industry qualification.
  </li>
  <li>
   Have knowledge and experience as below:
  </li>
  <li>
   a. Applying specific quality standards to all tasks undertaken to ensure that deliverables areaccurate and complete.
  </li>
  <li>
   b. Principles, practices, tools, and techniques of IT auditing.
  </li>
  <li>
   c. Methods and techniques for reporting progress and financial conformance against an agreed plan.
  </li>
  <li>
   Have technical and business skills as below:
  </li>
  <li>
   a. Communicate well, both orally and in writing, and has the skill to influence through persuasion in a formal context.
  </li>
  <li>
   Has a good overall knowledge of wide areas of information systems practice and applications. Understands the need to maintain a practical and pragmatic approach to standards compliance
  </li>
  <li>
   b. Applying standards, practices, codes, and assessment and certification programs relevant to the IT industry and the specific organization or business domain.
  </li>
  <li>
   c. The system or method for the management of quality within the employing organization&rsquo;s IT practices, including quality planning, assurance, and control.
   <br/>
   <br/>
  </li>
 </ul>
 Skills: service management,reporting progress,techniques,principles,financial conformance,itsm,it auditing,it,standards,tools,practices
</div>


GRC Specialist

Nama United Financing Company

<div>
 <p>
  <strong>
   Purpose of the Job (Overall Accountability)
  </strong>
 </p>
 <ul>
  <li>
   The Compliance Officer is responsible for ensuring that the organization complies with all applicable laws, regulatory requirements, internal policies, and ethical standards. This role involves developing and implementing compliance programs, monitoring adherence to policies, conducting audits, and advising management on compliance risks and strategies.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Principal Responsibilities / Accountabilities
  </strong>
 </p>
 <ul>
  <li>
   Monitor and interpret changes in relevant laws, regulations, and standards affecting the organization.
  </li>
  <li>
   Conduct periodic internal reviews, audits, and risk assessments to ensure compliance.
  </li>
  <li>
   Provide training and guidance to staff on compliance and ethics-related topics.
  </li>
  <li>
   Investigate potential compliance issues or violations and report findings to senior management.
  </li>
  <li>
   Promote a culture of integrity, ethical behavior, and accountability throughout the organization.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Qualifications / Experience
  </strong>
 </p>
 <p>
  <strong>
   Essential
  </strong>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s degree in law, Business Administration, Finance, Accounting, or a related field.
  </li>
  <li>
   Preferred professional certification (e.g., CCEP, CAMS, CRCM, CIA).
  </li>
  <li>
   Minimum of [3&ndash;5] years&rsquo; experience in compliance, audit, risk management, or related roles.
  </li>
  <li>
   Strong knowledge of regulatory requirements applicable to the industry.
  </li>
  <li>
   Excellent analytical, problem-solving, and decision-making skills.
  </li>
  <li>
   High attention to detail and organizational ability.
  </li>
  <li>
   Strong communication and interpersonal skills, with the ability to influence and educate others.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Desirable
  </strong>
 </p>
 <ul>
  <li>
   Integrity and ethical judgment
  </li>
  <li>
   Regulatory awareness
  </li>
  <li>
   Risk management
  </li>
  <li>
   Communication and training delivery
  </li>
  <li>
   Analytical and investigative skills
  </li>
  <li>
   Confidentiality and discretion
  </li>
 </ul>
 <p>
  <strong>
   Note: The principal accountabilities listed above are an illustrative list and not an exhaustive list. Additional responsibilities may be added from time to time depending on organizational requirements.
  </strong>
 </p>
</div>


Compliance Officer

Pacific Gas and Electric

Requisition ID # 171830
<br><br>
<b>Job Category:</b> Compliance / Risk / Quality Assurance
<br><b>Job Level:</b> Manager/Principal
<br><b>Business Unit:</b> Gen Counsel, Ethics, Risk & Compliance
<br><b>Work Type:</b> Hybrid
<br><b>Job Location:</b> Oakland
<br><br>
Department Overview
<br>The Compliance department of Compliance & Ethics provides an infrastructure that enables PG&E departments and employees to conduct business in compliance with applicable laws and regulations and to effectively manage business and operational risks that face the organization. The Compliance team acts in a consultative capacity as a business partner and compliance expert to the entire organization, and sets the compliance standards and framework for the organization. Major activities of the compliance program include understanding the business environment, identifying and assessing organizational compliance requirements, ensuring that work processes are included within guidance documents, helping compliance requirement owners develop effective controls, facilitating compliance management, and setting policies and standards, in line with compliance objectives. The Compliance department also partners with the Ethics team, who promote a culture of compliance and ethics where employees are enabled and inspired to act with integrity, speak up to raise concerns and comply with all legal and regulatory requirements.
<br><br>
Position Summary
<br>The Risk and Compliance Analyst Principal role is focused on the development and oversight of enterprise Compliance department activities designed to increase the maturity of compliance programs and performance across PG&E, including in cross‑organizational work areas and complex regulatory environments .
<br><br>
<b>The role will be responsible for:</b><br>
Managing and helping to provide assurance over enterprise Compliance programs, procedures and systems. Act in a consultative capacity as a business partner and Risk and Compliance expert to lines of business, including teams supporting federal and state funding programs . Understanding the general business environment and associated risks and compliance requirements of the enterprise, with emphasis on emerging and evolving regulatory obligations . Supporting the LOBs’ efforts in identifying and assessing organizational compliance requirements and risks, developing controls and metrics and evaluating effectiveness, evaluating control deficiencies, supporting the design of mitigating activities, and helping to facilitate and publish policies and standards, in line with compliance objectives and/or established risk management protocols. Supporting a governance structure that enables business units, departments and employees 1) to conduct business in compliance with applicable laws, regulations and policies; and 2) identify, manage and mitigate compliance risks that can affect the business, including cross‑functional requirements associated with loans, grants, and government contracts . Acting as an advocate for and helping train and engage employees and leaders throughout the company in risk and compliance to ensure understanding of compliance program guidance and other needed items to support organization‑wide awareness and facilitate LOB behaviors related to risk and compliance.
<br><br>
Major Areas of Responsibility
<br><br>
Major areas of responsibility may include the following Compliance Management activities:
<br>Lead the enterprise’s Federal Contract Compliance Program , including support for compliance obligations associated with federal loans, grants, and other government funding. Provide guidance on the company’s management of cross‑functional compliance obligations, identification of new and changing requirements, and compliance investigations, including labor, sourcing, and reporting requirements . Create program tools, drive coordinated work on key compliance areas, and work hands‑on with line of business leaders to improve compliance performance, standardization , and program elements. Lead, implement, facilitate and provide assurance over enterprise‑wide compliance and ethics programs to meet PG&E’s compliance requirements. Support the LOBs as they: Understand and document State, Federal and local compliance obligations and associated controls and business processes; complete or coordinate compliance validation activities and control effectiveness testing; assess and resolve complex control deficiency issues and ensure remediation actions are effective; assess and analyze regulatory requirements to determine impact and remediation efforts; assess compliance risk and design control risk mitigation plans and support business implementation. Track and report key compliance metrics, including metrics used to support assurance and reporting for government funding programs .
<br><br>
This position is hybrid, working from your remote office and your assigned work location based on business needs or company requirements. The assigned work location will be within the PG&E Service Territory and will be agreed upon by the successful candidate and hiring leader.
<br><br>
PG&E is providing the full salary/pay range for this position. The actual amount paid to an individual will be based on multiple factors, including, but not limited to, internal equity, specific skills, education, licenses or certifications, experience, market value, and geographic location. The range to reasonably expect will be around the minimum and the midpoint. The final decision will be made on a case-by-case basis related to the factors above. This job is also eligible to participate in PG&E’s discretionary incentive compensation programs.
<br><br>
<b>Bay Area Min:</b> $136,000
<br><b>Bay Area Mid:</b> $184,000
<br><b>Bay Area Max:</b> $232,000
<br><br>
Job Responsibilities Provides management and oversight of federal contract‑related compliance requirements and the governance framework and resources that enable LOBs to fully comply with their respective Federal Contract Compliance requirements, including Davis‑Bacon Act, Cargo Preference Act, and other applicable state and federal obligations . Drives coordination and collaboration among LOBs that share compliance obligations, particularly where requirements span multiple functions or funding sources . Leads continuous improvement in the enterprise Compliance & Ethics program; consistently demonstrates innovative and new thinking focused on program strategy, guidance document and controls development, compliance risk analysis and monitoring. Develops risk and compliance program strategies, templates and direction. Provides subject‑matter expertise and coaching related to risk and compliance management. Works independently with minimal guidance on complex compliance and risk assessment issues with critical impact to the organization and the company. Anticipates risk and compliance issues and develops innovative solutions to mitigate risks, including scalable and sustainable program approaches . May participate in established compliance or risk management forums at the enterprise level. Develops and coordinates preparation of presentation materials for various levels of management up to and including senior vice president. Provides support, advice, guidance and recommendations to compliance and ethics stakeholders, including senior leaders, to ensure effective compliance risk management. Supports integrated planning deliverables related to enterprise compliance and ethics. Works autonomously and has a solid leadership role and function. Works with all levels of leadership (up to and including SVP) across functions to influence decisions around risk and compliance issues. Works with senior management to support strategic planning and decision‑making on risk and compliance issues. Makes recommendations to functional management, directors, officers and their employees. Leads, and develops materials for, training and educating employees and leaders 1:1 or in small groups to ensure understanding of compliance management principles and other needed items to support organization‑wide awareness and facilitate LOB behaviors related to compliance. Assist with other compliance‑related projects and activities as directed.
<br><br>
Qualification
<br>Minimum
<br><br>
<ul>
<li>Bachelor’s degree in in any of Management, Risk and Insurance, Business, Accounting, Finance, or related discipline; or equivalent experience</li>
<li>10 or more years of experience in risk or compliance management, utility operations or related field</li>
</ul>
Desired
<br><b>Prior experience in any of the following:</b> risk or compliance management, utility operations or related field Advanced analytics and issue resolution skills Able to work closely with line of business representatives as a true partner Applies demonstrated knowledge and skill to resolve complex problems Able to develop complex as is and to be process maps for risk and compliance processes Able to address complex strategic issues and take a broad perspective to identify innovative solutions Able to identify and implement program and process improvement opportunities Ability to speak openly and knowledgably both to peers and leaders on risk and compliance issues Able to work independently MBA or Master’s degree in related discipline Internal Audit, Certified Compliance & Ethics Professional (CCEP) or RIMS certification or equivalent

Principal Risk & Compliance Analyst

Fourth Command

<p>Job Overview</p><p>We are seeking a skilled GRC Analyst to join our Governance, Risk, and Compliance team. The GRC Analyst will be responsible for supporting the implementation, maintenance, and optimization of GRC programs using the OneTrust GRC platform, with hands-on experience in risk assessment, control management, compliance monitoring, audit support, and reporting. The role requires strong technical proficiency in OneTrust for managing policies, risks, audits, and workflows, along with familiarity with other GRC platforms to support enterprise clients in achieving regulatory compliance and risk management objectives.</p><p>Key Responsibilities</p><ul><li><b>OneTrust GRC Platform Operations:</b> Configure, administer, and optimize OneTrust GRC platform including risk assessments, policy management, control mapping, audit workflows, and automated notifications using OneTrust Athena AI for intelligent risk identification and remediation.</li><li><b>Risk Management:</b> Conduct risk assessments, maintain risk registers, track key risk indicators (KRIs), and implement risk treatment plans with automated workflows and stakeholder task assignments in OneTrust.</li><li><b>Compliance Monitoring:</b> Map controls to frameworks (ISO 27001, SOC 2, GDPR, PCI DSS), monitor compliance status, manage evidence collection, and generate compliance reports and dashboards.</li><li><b>Audit and Assessment Support:</b> Support internal and external audits by managing audit workflows, collecting evidence, tracking findings, and facilitating remediation using OneTrust's audit management capabilities.</li><li><b>Policy and Control Management:</b> Develop, review, and maintain security policies, standards, and procedures; map controls across multiple frameworks; and distribute policies with role-based access controls.​</li><li><b>Third-Party Risk Management:</b> Manage vendor assessments, questionnaires, and third-party risk monitoring using OneTrust's integrated workflows and risk scoring features.​</li><li><b>Platform Administration:</b> Manage user roles, permissions, organizational hierarchies, SSO integration (SAML 2.0), SCIM provisioning, and custom workflows in OneTrust GRC.​</li><li><b>Reporting and Analytics:</b> Create custom reports, dashboards, and executive summaries on risk posture, compliance status, audit findings, and KRI trends using OneTrust analytics.​</li><li><b>Cross-Platform Experience:</b> Support integration and migration activities involving other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate, or Diligent for client engagements.</li><li><b>Stakeholder Support:</b> Respond to customer security questionnaires (SIG, CAIQ), due diligence requests, and compliance inquiries; collaborate with IT, InfoSec, Legal, and business teams.</li></ul><p>QualificationsExperience</p><p>2&ndash;3 years of hands-on experience in GRC operations, compliance, risk management, or information security with demonstrated proficiency in OneTrust GRC platform administration and configuration.</p><p>Technical Skills</p><ul><li>Advanced hands-on experience with OneTrust GRC platform including risk management, audit management, policy management, control mapping, workflows, and Athena AI automation.</li><li>Familiarity with other GRC platforms such as RSA Archer, ServiceNow GRC, MetricStream, LogicGate Risk Cloud, or Diligent GRC.</li><li>Experience with compliance frameworks including ISO 27001, SOC 2, GDPR, PCI DSS, NIST, and privacy regulations.</li><li>Proficiency in risk assessment methodologies, control frameworks, and evidence management.</li><li>Knowledge of SSO (SAML 2.0), SCIM, role-based access controls (RBAC), and API integrations.​</li><li>Strong Excel skills for risk registers, reporting, and data analysis.</li></ul><p>Preferred Certifications</p><ul><li>OneTrust Certified GRC Administrator or OneTrust GRC User Certification</li><li>Certified Information Security Manager (CISM) or Certified in Risk and Information Systems Control (CRISC)</li><li>ISO 27001 Lead Implementer/Auditor</li><li>Certified Data Privacy Solutions Engineer (CDPSE)</li><li>CompTIA Security+ or equivalent</li></ul><p>Education</p><p>Bachelor's degree in Computer Science, Information Security, Cybersecurity, Business Administration, or a related field.</p><p>Soft Skills</p><ul><li>Strong analytical and problem-solving skills for risk identification and compliance gap analysis.</li><li>Excellent written and verbal communication for policy documentation and stakeholder interactions.</li><li>Detail-oriented with ability to manage multiple tasks and deadlines.</li><li>Collaborative team player comfortable working with cross-functional teams.</li></ul><p>Additional Requirements</p><ul><li>Experience responding to customer security questionnaires and due diligence requests.</li><li>Understanding of GRC maturity models and continuous improvement processes.</li><li>Ability to work in fast-paced consulting environment supporting multiple client engagements.</li></ul><p>Resume Information</p><p>How to Apply</p><p>Email your resume to job2026@thefourthcommand.com<br/><b>Subject:</b> FC_GRC_ANALYST_[YOUR NAME]_RESUME</p><p>Resume Requirements</p><ul><li>OneTrust GRC hands-on experience with specific modules used (risk, audit, policy, etc.).</li><li>List of GRC platforms administered (OneTrust primary, others secondary).</li><li>Compliance frameworks implemented or supported.</li><li>Relevant certifications with dates.</li><li>Passport size photo (mandatory).</li></ul><p>Incomplete applications will not be considered.</p><p>Job Type: Full-time</p><p>Pay: AED300,000.00 - AED800,000.00 per year</p><p>Work Location: In person</p>

GRC Analyst

Google

<div>Note: By applying to this position you will have an opportunity to share your preferred working location from the following: <b>Chicago, IL, USA; Sunnyvale, CA, USA</b>.<h3 class="jobSectionHeader"><b>
Minimum qualifications:</b></h3><ul>
<li>Bachelor&rsquo;s degree in Computer Science, Informations Systems, Management Information Systems, Finance, Accounting, Business or equivalent practical experience.</li>
<li>7 years of experience in internal audit, risk or compliance roles.</li>
<li>Experience identifying and analyzing risks and internal controls in business and technology processes.</li>
<li>Experience developing and leading audit programs, reporting on audit findings or making recommendations for risk mitigation.</li></ul><br>
<h3 class="jobSectionHeader"><b>
Preferred qualifications:</b></h3><ul>
<li>Certifications in CISA/CISSP/PMP/CIA or equivalent.</li>
<li>Experience in relational database analysis (e.g., SQL).<br>
</li>
<li>Experience performing risk assessments, designing or implementing internal controls, and auditing data platforms, shared software development and deployment ecosystems, Identity and Access Management (IAM) frameworks, AI, or regulatory compliance.</li>
<li>Familiarity with basic structures and principles of object-oriented programming.</li>
<li>Understanding of coding in Python, Java, C++ or comparable language, evaluating for risk and design.</li>
<li>Ability to navigate through ambiguity, manage and coordinate multiple project assignments simultaneously in a fast-paced, deadline-driven environment, accepting ownership and accountability of the process and delivering on commitments.</li>
</ul><div><h2 class="jobSectionHeader"><b>About the job</b></h2><p>
Internal Audit&lsquo;s mission is to focus on reducing risk across Alphabet. We do this by monitoring the risk environment across Alphabet and providing insights to enable effective risk management. We work closely with teams and leadership to achieve a strong control environment that enhances and protects organizational value. We serve as one of the company&rsquo;s various lines of defense for staffing and developing our team to be control experts who deliver objective and reliable results.</p><div>
As a member of the team, you will advise the business and engineering groups to identify areas of risk and make valuable recommendations on controls. You will have the opportunity to influence change and decisions for business initiatives including product launches and system implementations.<br>
</div><div></div><br>
<div>In this role, you will lead cross-functional audit initiatives at Alphabet, partnering with data scientists and business auditors to evaluate risk across operational, financial, and tech domains. You will be translating complex data into actionable, risk-based recommendations for stakeholders, including non-technical audiences.</div>
The US base salary range for this full-time position is $148,000-$215,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.<div></div><div><br>
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</div></div><div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul>
<li>Drive the audit process and deliverables by collaborating with business auditors and data scientists to develop and execute programs evaluating operational, financial, technology, and compliance risks.</li>
<li>Analyze audit results to draw meaningful conclusions, and provide practical, risk-based, data-driven, and actionable improvement recommendations; prepare audit reports summarizing scope, procedures, findings, and recommendations to a variety of stakeholders.</li>
<li>Manage project workload, timelines and budgets to ensure timely completion of assigned audit initiatives; evaluate changes to existing processes and products to identify potential risks and recommend appropriate improvements.</li>
<li>Educate and advocate for the importance of robust controls, effective control environment, and the value of internal audit.</li>
<li>Manage relationships with stakeholders relevant to areas of domain expertise (e.g., engineering, security) and leverage to gain meaningful risk insights to influence the audit risk universe and engagement and service offering prioritization.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Senior Technology Auditor, Internal Audit

Search 10000+ Risk and compliance specialist jobs near you this April. New roles added regularly across leading industries. Apply today.