SR. GRC ANALYST

Qualification Requirements  

• 3-5 years of experience in risk and control management
• 3-5 years of experience in an audit, accounting, risk management role in operations or information technology/information security, and/or operational risk management, or a combination thereof Preferred: Public accounting audit experience; "Big Four" audit experience.
• Knowledge of various control framework standards such as NIST, ISO, SOC2, etc.
• Define and implement the strategy for mapping control frameworks aligned to risk management processes.
• Ensure end-to-end process for controls and compliance is represented and established within the Cyber Security Risk Control framework, e.g., inclusive of control evidence/issue management.
• Experience with RCSA (Risk Control Self-Assessment Process).
• Familiarity with cyber security controls and remediations for shortfalls.
• Experience with problem solving in a team environment by thinking outside of the box and providing innovative solutions, with and without technology.
• Experience in Microsoft 365 (Project, PowerPoint, Excel, Word)
• CISA Certification preferred.
• SOX experience preferred