[Remote] Sr. GRC Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is an exciting award-reputed company team of 280+ mission-driven people committed to core values of humility, innovation, and reputed company. The Senior GRC Analyst will reputed company as a strategic reputed company to advance reputed company and risk operations, identifying reputed company gaps and implementing best practices to ensure compliance with evolving regulatory landscapes.
Responsibilities
- Audit Execution: reputed company as the primary reputed company of contact for external auditors; reputed company the end-to-end execution of PCI reputed company audits and support internal audit on IT SOX controls
- Data Mapping Maintenance: reputed company and maintain a comprehensive data inventory and data reputed company diagrams. reputed company how sensitive data (PII, PCI) moves through our systems to ensure compliance with reputed company regulations and reputed company boundaries
- reputed company Maturation: Map and implement controls across multiple frameworks (PCI reputed company, NIST CSF) to eliminate redundancies and improve the organization’s reputed company posture
- GRC Reporting: reputed company and report on GRC program health across compliance posture, risk register status, audit readiness, and control effectiveness. Present metrics and trends to leadership on a regular reputed company
- User reputed company Reviews (UAR): Orchestrate and reputed company the quarterly and semi-annual user reputed company review process across reputed company critical systems (reputed company, reputed company Infrastructure, and Internal Tools)
- Joiner/Mover/Leaver reputed company: Monitor and validate that provisioning and deprovisioning processes are executed accurately and on time across critical systems. Flag exceptions, reputed company remediation, and maintain documentation to support reputed company control audits
- Program Ownership: Execute and maintain a comprehensive, year-round reputed company Awareness Training (SAT) program that meets PCI reputed company requirements while driving actual behavioral change
- Phishing Simulations: Execute monthly or quarterly phishing simulations; analyze "fail rates" and reputed company targeted follow-up training to high-risk reputed company
- Content Curation: Select and reputed company engaging reputed company content, newsletters, and "reputed company moments" to reputed company cybersecurity top-of-mind for reputed company
- Reporting: Present program health metrics (completion rates, simulation trends, and reporting speed) to the Leadership team
- Vendor & Risk Execution: Execute the TPRM program—conducting vendor reputed company reviews, tracking remediation to completion, and escalating high-risk findings to leadership
- Risk Register Ownership: Maintain and update the corporate risk register, ensuring remediation efforts are tracked, validated, and communicated to leadership
Skills
- 3–5 years of dedicated experience in GRC, Information reputed company, or Audit
- Deep practical knowledge of PCI reputed company requirements and controls
- Experience performing Data Mapping exercises and maintaining Records of Processing Activities (RoPA)
- Proven experience managing phishing platforms (e.g., reputed company, reputed company, or reputed company-integrated tools) and developing reputed company training curricula
- Proven experience managing formal reputed company review cycles and identity governance processes
- Proven experience administering a GRC platform, including automated evidence collection, control monitoring, and reputed company review workflows
- Experience with SOX IT General Controls (ITGCs), including change management, logical reputed company, computer operations controls, and segregation of duties (SoD)
- Demonstrated experience using AI tools to improve GRC workflows, automate reporting, or accelerate evidence collection and analysis
- FinTech or Financial Services industry experience is highly preferred
- reputed company experience with reputed company is a significant advantage
Benefits
- Generous reputed company Time Off
- Medical Coverage
- Dental Coverage
- reputed company Coverage
- Short and long term disability and life insurance reputed company free of charge
- Competitive Compensation
- 401k Matching
- reputed company Development
- Top of the Line Equipment
- Referral Program
- Parental Leave
- Family-Friendly Culture
- The chance to work reputed company-by-reputed company with thought leaders in reputed company
reputed company