GRC Analyst II: Security, Privacy & Risk Champion

Motion; Atlanta (GA); Presencial; USD 75.000 - 105.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

401(k) plan

Tuition reimbursement

Paid vacation

Paid sick leave

Paid holidays

Descripción de la vacante

Motion is seeking a Governance, Risk & Compliance (GRC) Analyst II in Atlanta to support Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management within the GRC function. You will execute day-to-day GRC activities across assigned domains and report to the GRC Lead.

Responsibilities include monitoring vulnerability scanning, prioritizing remediation, managing policy exceptions, supporting privacy and privacy-by-design efforts, and contributing to risk

Formación

• Typically requires a bachelor’s degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent combination.

Responsabilidades

• Monitors vulnerability scanning results and maintain visibility into Motion's external attack surface.
• Tracks and prioritizes vulnerabilities for remediation, partnering with IT Operations and Application Development.
• Owns vulnerability management reporting and metrics and scanning tool administration.
• Drives remediation service level agreements and escalates cross-team blockers as needed.
• Develops, maintains, and periodically reviews information security policies and standards.
• Owns the IT Security Awareness program, including content updates and tracking participation amongst stakeholders.
• Manages policy exceptions and the exception/acceptance process.
• Represents Governance in cross-team initiatives and audits.
• Supports compliance activities across pertinent platforms.
• Supports Operational Technology (OT) compliance efforts in partnership with the Cyber Defense Engineering & Architecture team.
• Manages privacy notices, cookie compliance, and consent/preference management across digital properties.
• Supports privacy program operations, including gap identification and remediation tracking.
• Assists with Privacy Impact Assessments (PIAs) and Data Privacy Impact Assessments (DPIAs).
• Manages intake and processing of Data Subject Access Requests (DSARs).
• Assist with compliance audits and assessments including evidence coordination.
• Produces privacy and compliance metrics and reporting data for the Lead, and support development of privacy training and awareness content.
• Maintains and updates the cyber risk register and tracks security issues through the remediation lifecycle, following up with control owners on outstanding items.
• Supports execution of IT risk assessments and third-party/vendor risk assessments including periodic reviews and quality assurance of risk documentation.
• Tracks and communicates risk exceptions and remediation action plans to stakeholders.
• Collaborates with business partners and vendor stakeholders to identify improvement opportunities in risk processes.
• Maintains awareness of relevant risk frameworks and standards.

Conocimientos

Analytical skills

Documentation skills

Written communication

Verbal communication

Independent work

Detail oriented

GRC tooling

Framework experience

Educación

Bachelor's degree in Computer Science or related field

Herramientas

GRC platforms

Risk assessment tools

Descripción del empleo

Motion is seeking a Governance, Risk & Compliance (GRC) Analyst II in Atlanta to support Privacy, Compliance, Risk Management, Third-Party Risk, Governance, or Attack Surface Management within the GRC function. You will execute day-to-day GRC activities across assigned domains and report to the GRC Lead.

Responsibilities include monitoring vulnerability scanning, prioritizing remediation, managing policy exceptions, supporting privacy and privacy-by-design efforts, and contributing to risk