GRC Analyst (Governance) - Global Industrial

Genuine Parts Company; Alabama; Hybrid; USD 85,000 - 110,000; Full time

Benefits offered by this job

Health insurance

401(k)

Tuition reimbursement

Vacation and holidays

Job summary

Motion is seeking a GRC Analyst II to support Governance, Risk & Compliance efforts. The role involves monitoring security posture, vulnerability management, policy maintenance, and privacy program operations within a hybrid work model across Birmingham, AL, and Atlanta, GA.

The ideal candidate has a bachelor’s degree in a related field and 3–5 years of experience, with strong analytical and communication skills and familiarity with GRC tooling.

Qualifications

• Bachelor’s degree in computer science, software engineering, or a related field and three to five years of related experience or equivalent combination.
• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication skills; ability to work independently in a lean team.
• Familiarity with GRC tooling/platforms and privacy/compliance programs.

Responsibilities

• Monitors vulnerability scanning results and maintains visibility into external attack surface.
• Tracks and prioritizes vulnerabilities for remediation with IT Operations and Development teams.
• Owns vulnerability management reporting and metrics and scanning tool administration.
• Develops and updates information security policies and standards.

Skills

Analytical thinking

Communication skills

Documentation

Independent work

Education

Bachelor’s degree in computer science or related field

Tools

GRC tooling/platforms

Job description

## GRC Analyst (Governance) - Global IndustrialApply: Hybrid: Birmingham, AL, USA: Atlanta, GA, USA: Full time: Posted Today: R26\\_0000028922**SUMMARY:**Under general supervision the Governance, Risk & Compliance (GRC) Analyst II will support Motion's Governance, Risk & Compliance functions, which may include Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management. This role executes day-to-day GRC activities within their assigned domain, and reports to the GRC Lead.**JOB DUTIES*** Monitors vulnerability scanning results and maintain visibility into Motion's external attack surface.* Tracks and prioritizes vulnerabilities for remediation, partnering with IT Operations and Application Development.* Owns vulnerability management reporting and metrics and scanning tool administration.* Drives remediation service level agreements and escalate cross-team blockers as needed.* Develops, maintains, and periodically reviews information security policies and standards.* Owns the IT Security Awareness program, including content updates and tracking participation amongst stakeholders.* Manages policy exceptions and the exception/acceptance process.* Represents Governance in cross-team initiatives and audits.* Supports compliance activities across pertinent platforms.* Supports Operational Technology (OT) compliance efforts in partnership with the Cyber Defense Engineering & Architecture team.* Manages privacy notices, cookie compliance, and consent/preference management across digital properties.* Supports privacy program operations, including gap identification and remediation tracking.* Assists with Privacy Impact Assessments (PIAs) and Data Privacy Impact Assessments (DPIAs).* Manages intake and processing of Data Subject Access Requests (DSARs).* Assist with compliance audits and assessments including evidence coordination.* Produces privacy and compliance metrics and reporting data for the Lead, and support development of privacy training and awareness content.* Maintains and update the cyber risk register and track security issues through the remediation lifecycle, following up with control owners on outstanding items.* Supports execution of IT risk assessments and third-party/vendor risk assessments including periodic reviews and quality assurance of risk documentation.* Tracks and communicate risk exceptions and remediation action plans to stakeholders.* Collaborates with business partners and vendor stakeholders to identify improvement opportunities in risk processes.* Maintains awareness of relevant risk frameworks and standards.**EDUCATION & EXPERIENCE*** Typically requires a bachelor’s degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent combination.**KNOWLEDGE, SKILLS, ABILITIES*** Strong analytical, organizational, and documentation skills.* Excellent written and verbal communication skills.* Ability to work independently in a lean team environment.* Detail-oriented and self-directed.* Relevant certification or progress toward certification.* Familiarity with GRC tooling/platforms.* Experience in a specific framework relevant to the functional area assigned.**PHYSICAL DEMANDS:****LICENSES & CERTIFICATIONS:****SUPERVISORY RESPONSIBILITY:** No Supervisory Responsibility**BUDGET RESPONSIBILITY:** No**COMPANY INFORMATION:**Motion offers an excellent benefits package which includes options for healthcare coverage, 401(k), tuition reimbursement, vacation, sick, and holiday pay.**DISCLAIMER:**This job description illustrates the general nature and level of work performed by employees within this job classification. It is not intended to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and skills required. Management retains the right to add or modify duties at any time.