GRC Analyst II: Security, Privacy & Risk Champion

Genuine Parts Company; Atlanta (GA); On-site; USD 80,000 - 105,000; Full time

Job summary

Genuine Parts Company is seeking a GRC Analyst II to support Motion's Governance, Risk & Compliance functions, focusing on vulnerability management, privacy, and compliance.

The role executes day‑to‑day GRC activities, tracks vulnerabilities, supports audits, and maintains risk and compliance documentation. Collaboration with IT and business stakeholders is required to drive remediation and awareness programs.

Qualifications

• Bachelor’s degree in computer science, software engineering, or related field.
• 3–5 years of related GRC experience or equivalent.
• Familiarity with risk and privacy frameworks and controls.
• Certifications related to GRC are a plus.

Responsibilities

• Monitor vulnerability results and maintain visibility into external attack surface.
• Track and prioritize vulnerabilities for remediation with IT operations and dev teams.
• Own vulnerability management reporting, metrics, and scanning tool administration.
• Drive remediation SLAs and escalate blockers across teams.
• Develop and review information security policies and standards.
• Manage IT security awareness content and participation tracking.
• Handle policy exceptions and exception/acceptance processes.
• Support privacy and compliance activities across platforms.
• Support privacy program operations, including DSARs and PIAs.
• Maintain cyber risk register and track remediation lifecycle with control owners.
• Assist with IT risk assessments and third-party/vendor risk assessments.
• Collaborate with partners to identify risk process improvements.

Skills

Analytical skills

Organizational skills

Documentation

Written communication

Verbal communication

Independent work

Attention to detail

GRC tooling familiarity

Framework knowledge

Education

Bachelor’s degree in CS/Software Eng or related field

Job description

Genuine Parts Company is seeking a GRC Analyst II to support Motion's Governance, Risk & Compliance functions, focusing on vulnerability management, privacy, and compliance.

The role executes day‑to‑day GRC activities, tracks vulnerabilities, supports audits, and maintains risk and compliance documentation. Collaboration with IT and business stakeholders is required to drive remediation and awareness programs.