GRC Analyst (Governance) - Global Industrial

USA MOT Motion Industries, Inc.; United States; On-site; USD 85,000 - 112,000; Full time

Job summary

Motion is seeking a Governance, Risk & Compliance (GRC) Analyst II to support Privacy, Compliance, Risk, and other GRC domains. You will handle day-to-day GRC activities, vulnerability monitoring, policy management, and privacy program operations under the GRC Lead.

The role requires a bachelor’s degree in a related field and 3–5 years of experience, with strong analytical, communication, and documentation skills. Collaboration with IT and OT teams is essential.

Qualifications

• Bachelor's degree in computer science, software engineering, or related field.
• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication skills.
• Ability to work independently in a lean team environment.
• Familiarity with GRC tooling/platforms and relevant frameworks.

Responsibilities

• Monitor vulnerability scanning results and maintain visibility into the external attack surface.
• Track and prioritize vulnerabilities for remediation with IT Ops and App Development.
• Own vulnerability management reporting and scanning tool administration.
• Drive remediation SLAs and escalate blockers across teams as needed.
• Develop and maintain information security policies and standards.
• Manage IT Security Awareness program and document participation.
• Handle policy exceptions and the exception/acceptance process.
• Represent Governance in cross-team initiatives and audits.
• Support privacy and compliance activities across platforms.
• Assist with Privacy Impact Assessments and Data Privacy Impact Assessments.
• Manage DSAR intake and processing.
• Support audits and evidence coordination for compliance.
• Produce privacy and compliance metrics for leadership.

Skills

Analytical skills

Documentation

Communication skills

Independent work

Detail-oriented

GRC tooling

Education

Bachelor's degree in computer science or related field

Job description

SUMMARY

Under general supervision the Governance, Risk & Compliance (GRC) Analyst II will support Motion's Governance, Risk & Compliance functions, which may include Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management. This role executes day-to-day GRC activities within their assigned domain, and reports to the GRC Lead.

JOB DUTIES

• Monitors vulnerability scanning results and maintain visibility into Motion's external attack surface.
• Tracks and prioritizes vulnerabilities for remediation, partnering with IT Operations and Application Development.
• Owns vulnerability management reporting and metrics and scanning tool administration.
• Drives remediation service level agreements and escalates cross-team blockers as needed.
• Develops, maintains, and periodically reviews information security policies and standards.
• Owns the IT Security Awareness program, including content updates and tracking participation amongst stakeholders.
• Manages policy exceptions and the exception/acceptance process.
• Represents Governance in cross-team initiatives and audits.
• Supports compliance activities across pertinent platforms.
• Supports Operational Technology (OT) compliance efforts in partnership with the Cyber Defense Engineering & Architecture team.
• Manages privacy notices, cookie compliance, and consent/preference management across digital properties.
• Supports privacy program operations, including gap identification and remediation tracking.
• Assists with Privacy Impact Assessments (PIAs) and Data Privacy Impact Assessments (DPIAs).
• Manages intake and processing of Data Subject Access Requests (DSARs).
• Assist with compliance audits and assessments including evidence coordination.
• Produces privacy and compliance metrics and reporting data for the Lead, and support development of privacy training and awareness content.
• Maintains and update the cyber risk register and track security issues through the remediation lifecycle, following up with control owners on outstanding items.
• Supports execution of IT risk assessments and third-party/vendor risk assessments including periodic reviews and quality assurance of risk documentation.
• Tracks and communicate risk exceptions and remediation action plans to stakeholders.
• Collaborates with business partners and vendor stakeholders to identify improvement opportunities in risk processes.
• Maintains awareness of relevant risk frameworks and standards.

EDUCATION & EXPERIENCE

Typically requires a bachelor’s degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent combination.

KNOWLEDGE, SKILLS, ABILITIES

• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication skills.
• Ability to work independently in a lean team environment.
• Detail-oriented and self-directed.
• Relevant certification or progress toward certification.
• Familiarity with GRC tooling/platforms.
• Experience in a specific framework relevant to the functional area assigned.

PHYSICAL DEMANDS

LICENSES & CERTIFICATIONS

SUPERVISORY RESPONSIBILITY

No Supervisory Responsibility

BUDGET RESPONSIBILITY

No

COMPANY INFORMATION

Motion offers an excellent benefits package which includes options for healthcare coverage, 401(k), tuition reimbursement, vacation, sick, and holiday pay.

DISCLAIMER

This job description illustrates the general nature and level of work performed by employees within this job classification. It is not intended to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and skills required. Management retains the right to add or modify duties at any time. GPC conducts its business without regard to sex, race, creed, color, religion, marital status, national origin, citizenship status, age, pregnancy, sexual orientation, gender identity or expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic. GPC's policy is to recruit, hire, train, promote, assign, transfer and terminate employees based on their own ability, achievement, experience and conduct and other legitimate business reasons. Since 1928, GPC has set the standards for performance and value for our customers and our stakeholders. Today, we’re proud to say we’re the largest global auto parts network and a leading industrial parts distributor, one that offers rewarding careers that combine small company feel with a global scale. Our strengths are in the relationships we build and the value we deliver by merging local expertise with a global force.