GRC Analyst II – Security & Privacy Lead (Hybrid)

Genuine Parts Company; Atlanta (GA); Hybride; USD 90 000 - 120 000; Plein temps

Résumé du poste

Genuine Parts Company in Atlanta, GA is seeking a GRC Analyst II to support governance, risk, and compliance across privacy, third-party risk, and security operations. Under general supervision, you will execute day-to-day GRC activities within your domain and report to the GRC Lead.

You will monitor vulnerability scanning results, manage remediation SLAs, develop and maintain security policies, oversee IT security awareness, and assist with privacy program operations including DSARs and DPIAs,

Qualifications

• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication skills.
• Ability to work independently in a lean team environment.
• Familiarity with GRC tooling/platforms and risk frameworks.

Responsabilités

• Monitors vulnerability scanning results and maintains visibility into the external attack surface.
• Tracks and prioritizes vulnerabilities for remediation with IT Ops and App Dev.
• Owns vulnerability management reporting and scanning tool administration.
• Develops, maintains, and reviews information security policies and standards.
• Manages privacy notices, cookie compliance, and DSARs; supports PIAs/DPIAs.

Connaissances

Analytical thinking

Documentation skills

Written communication

Verbal communication

Independence

Detail-oriented

GRC tooling familiarity

Risk frameworks knowledge

Formation

Bachelor's degree in computer science or related field

Outils

GRC tooling/platforms

Privacy management tools

DSAR processing tools

Description du poste

Genuine Parts Company in Atlanta, GA is seeking a GRC Analyst II to support governance, risk, and compliance across privacy, third-party risk, and security operations. Under general supervision, you will execute day-to-day GRC activities within your domain and report to the GRC Lead.

You will monitor vulnerability scanning results, manage remediation SLAs, develop and maintain security policies, oversee IT security awareness, and assist with privacy program operations including DSARs and DPIAs,