Develop, maintain, and implement information security policies, standards, procedures, and guidelines.
Conduct cybersecurity and IT risk assessments and document identified risks, controls, and remediation plans.
Support GRC activities aligned with frameworks such as NIST CSF, NIST 800-53, ISO 27001, SOC 2, CIS Controls, PCI DSS, and other applicable standards.
Perform control assessments and monitor control effectiveness.
Coordinate internal and external security audits and compliance assessments.
Collect, review, and maintain evidence required for audits and regulatory compliance.
Track security findings, risks, exceptions, and remediation activities through closure.

GRC Analyst

Similar Analytics Jobs