Global GRC Analyst - Third-Party Risk & Compliance

091 CROWN Holdings, Inc.; Yardley (WA); On-site; USD 110,000 - 135,000; Full time

Benefits offered by this job

Strong commitment to employee safety

Career development through training

Exposure to global cybersecurity and R

Professional development through cross

Job summary

Crown Holdings, Inc. in Yardley, PA is seeking a Global Information Security GRC Analyst – Third-Party Risk to strengthen Crown’s cybersecurity governance.

You will drive third-party risk assessment, review vendor security, and maintain risk registers to support risk-informed business decisions. The role requires 3–5 years in cybersecurity/GRC, knowledge of ISO 27001/NIST, and strong analytical and stakeholder skills.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 3–5 years of experience in cybersecurity, GRC, cyber risk, or third-party risk management.
• Experience conducting security assessments and reviewing vendor security documentation.
• Knowledge of ISO 27001, NIST CSF, and SOC 2.

Responsibilities

• Manage the end-to-end third-party security risk assessment process.
• Assess vendor security controls and assurance documentation using ISO 27001, NIST frameworks, and SOC 2 reports.
• Review vendor security documentation, identify risks, and track remediation activities.
• Maintain third-party risk registers and support ongoing vendor monitoring and reporting.
• Conduct cybersecurity risk assessments and maintain risk registers.
• Support AI governance activities, including risk assessments and inventory management.
• Coordinate cybersecurity policy development, review, approval, and lifecycle activities.
• Support compliance and audit readiness through control testing, evidence collection, and remediation tracking.
• Develop cybersecurity metrics, dashboards, and leadership reporting.
• Identify opportunities to improve and automate GRC processes.

Skills

Analytical skills

Communication skills

Stakeholder management

Education

Bachelor's degree in Cybersecurity, IT, Information Systems, or related field

Tools

GRC platforms (LogicGate, ServiceNow GRC, Archer, OneTrust, AuditBoard)

Job description

Crown Holdings, Inc. in Yardley, PA is seeking a Global Information Security GRC Analyst – Third-Party Risk to strengthen Crown’s cybersecurity governance.

You will drive third-party risk assessment, review vendor security, and maintain risk registers to support risk-informed business decisions. The role requires 3–5 years in cybersecurity/GRC, knowledge of ISO 27001/NIST, and strong analytical and stakeholder skills.