GRC Analyst

Experteer Overview In this role you will support IT and business units in implementing governance, risk, and compliance frameworks. You will gather and document requirements for IAM and assist in maintaining policies and standards. You will collaborate with cross-functional teams to manage risk remediation and ensure regulatory adherence. This position offers the opportunity to influence security governance practices and contribute to a proactive risk management culture. Compensation / Benefits * Support requirements gathering and documentation for InfoSec projects and programs * Manage GRC ticket maintenance and advise stakeholders on GRC topics * Monitor risk remediation activities and track exceptions within established frameworks * Provide governance, risk, and compliance guidance and training to stakeholders * Engage with business partners to address information security governance concerns * Assist in development of security architecture, policies, principles and standards * Stay updated on latest access security issues Tasks * Bachelor in Information Security, Cybersecurity, Risk Management, or equivalent experience * Minimum 2 years in GRC or Information Security * Experience conducting requirements gathering and data analysis * Experience documenting and maintaining access and security policies and standards * Strong organization, planning, and project management skills * Excellent written and verbal communication * Ability to work across cross-functional teams * Strong computer skills including Microsoft Office and Oracle * Knowledge of access, security, and risk assessment methods * Knowledge of Information Security Standards (ISO 27001/27002, ITIL) * Knowledge of Data Privacy and Compliance Regulations (MA CMR 201, HIPPA, Red Flag) Key requirements * Healthcare coverage * 401(k) savings plan * Paid time off * Company holidays * Sick leave * Parental leave

and updated on latest access security issues Tasks * Bachelor in Information Security, Cybersecurity, Risk Management, or equivalent experience * Minimum 2 years in GRC or Information Security * Experience conducting requirements gathering and data analysis * Experience documenting and maintaining access and security policies and standards * Strong organization, planning, and project management skills * Excellent written and verbal communication * Ability to work across cross-functional teams * Strong computer skills including Microsoft Office and Oracle * Knowledge of access, security, and risk assessment methods * Knowledge of Information Security Standards (ISO 27001/27002, ITIL) * Knowledge of Data Privacy and Compliance Regulations (MA CMR 201, HIPPA, Red Flag) Key requirements * Healthcare coverage * 401(k) savings plan * Paid time off * Company holidays * Sick leave * Parental leave