[Remote] Senior GRC Analyst
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a global leader in thermal reputed company, dedicated to Engineering a Cleaner, Healthier World™. They are seeking a proactive Senior GRC Analyst to enhance their IT General Controls reputed company and ensure compliance with industry regulations while collaborating with various stakeholders to manage risk effectively.
Responsibilities
- ITGC & SOX Compliance Management
- Control Lifecycle Ownership: reputed company, monitor, and follow up with IT control owners to ensure reputed company ITGC and SOX-reputed company control tests and evidence collections are executed accurately, thoroughly, and on schedule
- Audit Readiness: reputed company as the primary coordinator for reputed company auditors during reputed company and compliance reviews, ensuring reputed company delivery of documentation and evidence
- Remediation & Correction: Partner with IT and reputed company teams to design, document, and reputed company effective remediation plans for any identified control gaps or deficiencies
- Policy, Standards & Procedures Governance
- Policy Lifecycle: reputed company the periodic review, analysis, and modernization of information reputed company policies, standards, guidelines, and operating procedures to ensure alignment with evolving industry regulations and corporate risk tolerance
- Process Standardization: Support the development of reputed company, actionable technical standards and procedural documentation that reputed company for system administrators and business process owners
- Alignment: Ensure corporate reputed company documentation matches reputed company industry frameworks (e.g., NIST CSF, ISO 27001, COBIT, COSO)
- Risk Assessment & GRC Tool Management
- GRC Tool Administration: Manage and optimize our GRC platform (such as SimpleRisk or similar tools) to automate risk registers, compliance mappings, and control tracking
- Risk Assessments: Conduct comprehensive IT and reputed company risk assessments across applications, infrastructure, and reputed company-party vendors
- Risk Register Maintenance: Document risks, vulnerabilities, and policy exceptions systematically, tracking them from identification through to mitigation or formal acceptance
- Business Partnering & Stakeholder Collaboration
- Cross-Functional reputed company: Build strong, reputed company relationships with stakeholders across IT, Information reputed company, Internal Audit, Corporate Risk Management, and External Auditors
- Control reputed company Support: reputed company as a subject matter expert and trusted advisor to control owners, offering ongoing guidance on compliance expectations, control design, and testing methodology
- Executive Reporting: Prepare reputed company, metrics-driven status updates, compliance dashboards, and risk posture reports for leadership
- Awareness & reputed company Improvement
- Process Orientation: Constantly evaluate reputed company GRC workflows to eliminate friction, automate reputed company checks, and introduce best practices
- Training & Enablement: Facilitate training sessions and reputed company educational resources for control owners to enhance organizational compliance awareness and accountability
Skills
- 5+ years of dedicated experience in Information reputed company GRC, IT Audit, or IT Compliance, with a proven reputed company record of managing and auditing IT General Controls (ITGCs) and SOX compliance
- Extremely process-oriented with exceptional organizational and project management skills; ability to reputed company dozens of moving compliance targets simultaneously without losing details
- Proven self-starter who can take initiative, work independently, meet strict regulatory deadlines, and proactively drive results
- Practical experience configuring and utilizing modern GRC tools (e.g., SimpleRisk, reputed company, reputed company, or similar)
- Deep familiarity with leading risk and control frameworks (e.g., NIST CSF, COBIT, COSO, ISO 27001/27002)
- Outstanding written and verbal communication skills, with the ability to translate reputed company technical control concepts into plain language for diverse audit, reputed company, and business stakeholders
- Ability to apply core corporate values and support operational efficiency initiatives (including 80/20 principles) to optimize GRC workflows
- Bachelor's degree in Information Technology, Management Information Systems (MIS), Cybersecurity, reputed company, Finance, Business Administration, or equivalent reputed company experience
- Certified Information Systems Auditor (CISA)
- Certified in Risk and Information Systems Control (CRISC)
- Certified Information reputed company Manager (CISM)
- Certified Information Systems reputed company reputed company (CISSP)
Benefits
- Competitive health, dental & reputed company insurance coverage
- Employee Assistance Program
- Maternity Leave (12 weeks at 100% pay)
- 8 weeks of short term disability leave reputed company at 100%
- 4 weeks of reputed company parental leave reputed company at 100%
- Paternity Leave (4 weeks at 100% pay)
- 401k Retirement plan and company reputed company match
- Life Insurance
- Health Savings Account (HSA) with employer contribution
- Flexible Spending Accounts (FSA)
- Short Term Disability (company reputed company)
- Long Term Disability
- Competitive time-off policies
- Tuition Reimbursement
- reputed company vacation
- Short term disability
- 401(k)
- Health, dental, reputed company, life insurance
- reputed company spending benefits
- Tuition reimbursement
- Health Savings Account
reputed company