GRC Analyst

• Ensure appropriate documentation in the form of Policy, standards, Process Narratives and controls, and procedures are created and updated as needed.
• Collaborate with relevant stakeholders to assess potential gaps and update policies to mitigate and to align with industry standards and regulatory (e.g: COBIT, FFIEC., etc) requirements.
• Continuously monitor and assess the effectiveness and compliance of policies, procedures, and controls.
• Ensure policies are communicated effectively and are easily accessible to all employees.
• Conduct annual reviews (or as needed) of existing policies and standards to ensure they are up-to-date, relevant, and aligned with changing business environment and regulations.
• Stay abreast of industry-specific regulations, legal requirements, and standards. Interpret and communicate the implications of these regulations to relevant stakeholders and ensure adherence to them across the organization.
• Collaborate closely with cross-functional teams, offering guidance and support to ensure these certifications are efficiently maintained, compliant with relevant standards, and aligned with the organization's security goals.
• Maintain knowledge of related security, regulatory, compliance and industry standards.
• Maintain accurate and comprehensive documentation of policies, revisions, and associated procedures.
• Perform other job-related duties as assigned.

Qualifications

• Minimum bachelor’s degree in information technology, computer science or cyber security systems or related field with 8 years’ experience in IT Security, Audit, Compliance, and Risk Management.
• Experience in developing and maintaining IT Policies, procedures, and documentation to ensure alignment with GRC objectives and organization goals.
• Experience working with COBIT Framework, Compliance, Risk Management, Security or Audit frameworks (i.e., FFIEC, NIST 800-53)
• Experience performing gap analysis to identify areas of improvement in IT GRC processes.
• Ability to produce high quality policy documentation.
• Strong oral and written communication skills and ability to work well with others in a collaborative, complex and challenging environment, present findings, and provide recommendations.
• Must demonstrate good judgment and attention details while prioritizing and delivering wide range of challenges and tasks.
• Ability to work effectively in a team and coordinate efforts across different teams to achieve IT GRC goals.
• Proficiency in standard office software suites.
• Experience working with GRC tools used for risk assessment, compliance monitoring, and reporting.
• Strong analytical and critical thinking skills is required to process complex data.
• Aptitude for identifying and solving IT GRC-related problems and implementing solutions to improve overall security and compliance posture.