Senior Governance Risk and Controls (GRC) Analyst

📋 Description

• Drive third-party risk assessments and due diligence globally.
• Manage governance workflows in ServiceNow and TrustArc.
• Respond to client cybersecurity RFIs and audits.
• Support SOC 2 and ISO 27001 certification programs.
• Collaborate with process owners, IT, Legal, Ethics, and auditors.
• Focus on EU and APAC regions; support NA as needed.

🎯 Requirements

• Bachelor's degree or equivalent mix in Information Security, Risk Management, GRC.
• 5+ years' information security experience focusing on risk, controls, and compliance.
• Strong knowledge of ISO 27001, SOC 2, NIST, PCI, GDPR.
• Experience reviewing vendor and client contracts for information security.
• 2+ years of ISO 27001 and SOC 2 audits.
• Familiarity with GRC tools (ServiceNow a plus) and methodologies.