Global GRC Analyst: Compliance, Risk & Audit (US Hours)

Sitecore; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Sitecore is seeking a detail-oriented GRC Analyst to support governance, risk, and compliance activities. Based in Kuala Lumpur, you will align with U.S. Central or Eastern time zones and collaborate across Engineering, Product, Legal, and Enterprise Technology.

The role focuses on implementing and maintaining compliance programs, audit support, risk assessments, and governance efforts in a fast-paced environment. Strong knowledge of industry standards is essential.

Qualifications

• Strong attention to detail, organizational skills, and ability to manage multiple tasks.
• Familiarity with ISO 27001, SOC 2, HIPAA, GDPR, PCI DSS, NIST, and related standards.
• Certifications such as CISA, CRISC, or ISO 27001 Lead Implementer/Auditor are a plus.
• Experience working across global teams and time zones is a plus.
• Bachelor’s degree in information technology, Cybersecurity, or a related field.

Responsibilities

• Governance & Compliance: Support implementation and maintenance of compliance programs aligned with frameworks such as ISO 27001, SOC 2, HIPAA, PCI DSS, GDPR, NIST, and IRAP.
• Audit Support: Coordinate audit activities, evidence collection, documentation preparation, and status reporting.
• Risk Management: Support periodic risk assessments and maintain risk and findings register.
• Cross-Functional Collaboration: Work with Engineering, Product, Legal, Procurement, and Enterprise Technology to support compliance initiatives.
• Reporting & Documentation: Prepare status reports, dashboards, and metrics on GRC activities for leadership.

Skills

Attention to detail

Organizational skills

Multitasking

Cross-functional collaboration

Education

Bachelor's degree in information technology or cybersecurity

Tools

SharePoint

Confluence

Microsoft Teams

Excel

Outlook

Job description

Sitecore is seeking a detail-oriented GRC Analyst to support governance, risk, and compliance activities. Based in Kuala Lumpur, you will align with U.S. Central or Eastern time zones and collaborate across Engineering, Product, Legal, and Enterprise Technology.

The role focuses on implementing and maintaining compliance programs, audit support, risk assessments, and governance efforts in a fast-paced environment. Strong knowledge of industry standards is essential.