Cybersecurity & GRC Analyst

Key IT- GRC Responsibilities :

• Risk Assessment and Management :   Identify, assess, and prioritize IT-related risks, developing mitigation strategies.
• Compliance Management :   Ensure adherence to relevant regulations, industry standards, and internal policies. E.g. GDPR, CCPA, ISO 270001, SOC2.
• Policy Development and Implementation :   Create and maintain IT governance policies and procedures.
• Audit Management, tracking and Reporting :   Conduct internal audits, document findings, and prepare reports for management and stakeholders.
• Collaboration :   Work with IT, security, and other business teams to implement and maintain GRC programs.
• Staying Current :   Keep abreast of evolving regulations, industry best practices, and emerging technologies, continuous controls evaluation, mapping to standards and improvement, evaluating existing IT general and entity level controls and improving them.

Skills and Qualifications :

Soft & Analytical Skills

Skills Required

Cisa, Cism, Cissp, audit management