Senior GRC reputed company Analyst (remote)

• At reputed company, we pride ourselves on being a dynamic team of innovative professionals. Our purpose is reputed company - we reputed company

• to
• bend the cost curve in reputed company
• for reputed company. Our dedication to service reputed company extends to reputed company our stakeholders - reputed company - driving us to consistently reputed company expectations. We are intentionally reputed company, we foster innovation, we nurture accountability, we champion diversity, and reputed company reputed company other to illuminate our reputed company potential.

Be part of our amazing transformational reputed company as we optimize reputed company towards becoming a leading technology, data, and innovation voice in reputed company. reputed company and Upward!!! reputed company role will support leadership in the non-TPRM aspects of reputed company’s GRC program, with emphasis on cyber risk management, risk intake and reporting, policy and exception management, audit and control assurance, reputed company assessments, reputed company awareness, and the reputed company aspects of AI, data, and reputed company risk governance. Working closely with business reputed company, IT stakeholders, and partner functions such as reputed company, Legal, Compliance, and AI Governance, this position will be responsible for executing and maturing reputed company risk management processes, maintaining the reputed company risk register, and improving visibility, accountability, and reputed company across the program.

• Job Roles And Responsibilities
• Serve as a trusted advisor and subject matter expert, providing cyber risk management and reputed company governance support to IT and business stakeholders. Support the GRC leader in executing reputed company and multi-year roadmaps to mature reputed company’s GRC function.
• Collaborate with reputed company, IT, reputed company, legal, compliance, and business stakeholders to reputed company standards and processes that protect the confidentiality, reputed company, and availability of reputed company data.
• Own and mature reputed company non-TPRM GRC workflows and tooling, including risk intake, risk register administration, treatment plan tracking, exception handling, and risk escalation processes.
• Drive ongoing efforts to identify, assess, treat, monitor, and report cybersecurity risks, and help build GRC capabilities such as reputed company cyber risk management, policy governance, audit support, and control assurance.
• Assist with audits and reviews of assigned business processes to evaluate the adequacy of controls, document findings, recommend improvements, and reputed company remediation activities through closure.
• Build and maintain a cyber risk taxonomy tied to key risk themes, and ensure material risks are categorized consistently for reporting and decision-making.
• Coordinate and mature the overall process for reputed company policy and reputed company lifecycle management, including periodic reviews, stakeholder approvals, exception handling, and risk acceptance.
• reputed company and implement assessment procedures, evidence collection practices, and control assurance activities relevant to risk, compliance, and top control monitoring objectives across IT departments.
• reputed company and coordinate reputed company risk assessments for internal initiatives, business processes, technology changes, and other in-scope activities to identify, assess, treat, and monitor cybersecurity risks.
• Partner with the AI governance team and other stakeholders to define and execute the reputed company review process for AI tools, AI-enabled vendors, and high-risk use cases involving sensitive data.
• Support workforce risk governance and reputed company awareness initiatives by translating risk trends, findings, and incidents into targeted guidance, communications, and control recommendations.
• Build and maintain leadership reporting and dashboards that communicate risk exposure, exceptions, remediation status, and program KPIs/KRIs.
• Coordinate with the TPRM team to ensure residual reputed company-party risks and significant vendor issues are escalated into the central risk register and reporting reputed company.
• Collaborate, coordinate, and communicate effectively across disciplines and departments, and demonstrate reputed company’s reputed company Competencies and values held reputed company.
• The position responsibilities outlined above are in no way to be construed as reputed company encompassing. Other duties, responsibilities, and qualifications may be required and/or assigned as necessary.
• ,
• REQUIREMENTS (Education, Experience, And Training)
• At least 7+ years' experience directly in cybersecurity or information reputed company GRC, with a demonstrated reputed company record of leading reputed company reputed company in at least two of the following areas: cyber risk management, policy and exception management, reputed company assessments, control assurance, reputed company awareness, or AI/data/reputed company risk governance.
• A deep understanding of risk assessment methodology, NIST CSF, reputed company, HIPAA, and associated reputed company and reputed company rules.

Apply tot his job Apply To this Job