GRC Analyst Lead - Global Industrial

Genuine Parts Company; Alabama; On-site; USD 100,000 - 140,000; Full time

Job summary

Motion is seeking a Lead Governance, Risk & Compliance (GRC) Analyst to support their GRC functions, including Privacy, Compliance, Risk Management, Third-Party Risk, and Governance. The role leads the GRC team and manages day-to-day activities, with SOX lead experience to oversee the IT SOX organization.

The candidate will coordinate audits, monitor controls, and report performance to the Director of GRC while staying current with regulatory trends across IT and business stakeholders.

Qualifications

• Bachelor’s degree in computer science, software engineering, or related field.
• Five+ years in GRC, IT risk, or related areas; equivalent combination acceptable.

Responsibilities

• Own execution and day-to-day management of the GRC program area.
• Lead and coordinate Analyst-level team members as applicable.
• Coordinate audits, assessments, or reviews with evidence collection and remediation tracking.
• Monitor control or program effectiveness and drive continuous improvement.
• Serve as primary point of contact for the assigned domain across IT, business, and Legal/external parties.
• Own reporting on performance and posture to the Director of GRC.
• Maintain awareness of regulations, frameworks, and industry trends.
• Perform other duties as assigned.

Skills

Analytical skills

Documentation skills

Written & verbal communication

Independent work

Attention to detail

GRC tooling familiarity

Certification progress

Education

Bachelor’s degree in CS/IT or related field

Tools

GRC tools

Job description

SUMMARY:

Under limited supervision the Lead Governance, Risk & Compliance (GRC) Analyst will support Motion's Governance, Risk & Compliance functions, which may include Privacy, Compliance, Risk Management or Third-Party Risk or Governance. This role executes day-to-day GRC activities within their assigned domain. Acts as a lead for the GRC team. Looking for SOX lead experience to take over the IT SOX organization with experience in one or more of the other areas mentioned.

JOB DUTIES

• Own execution and day-to-day management of the assigned GRC program area.


• Lead and coordinate the work of Analyst-level team members, where applicable.


• Coordinate audits, assessments, or reviews relevant to the assigned domain, overseeing evidence collection and remediation tracking.


• Monitor control or program effectiveness and drive continuous improvement within the assigned function.


• Serve as the primary point of contact and escalation path for the assigned domain across IT, business stakeholders, and (where applicable) Legal or external parties.


• Own reporting on the assigned function's performance and posture to the Director of GRC.


• Maintain awareness of emerging regulations, frameworks, and industry trends relevant to the assigned domain.


• Performs other duties as assigned.

EDUCATION & EXPERIENCE

• Typically requires a bachelor’s degree in computer science, software engineering, or a related field and five (5) or more years of related experience or equivalent combination.

KNOWLEDGE, SKILLS, ABILITIES

• Strong analytical, organizational, and documentation skills.


• Excellent written and verbal communication skills.


• Ability to work independently in a lean team environment.


• Detail-oriented and self-directed.


• Relevant certification or progress toward certification.


• Familiarity with GRC tooling/platforms.


• Experience in a specific framework relevant to the functional area assigned.

PHYSICAL DEMANDS:

LICENSES & CERTIFICATIONS:

SUPERVISORY RESPONSIBILITY: No Supervisory Responsibility

BUDGET RESPONSIBILITY: No

COMPANY INFORMATION:

Motion offers an excellent benefits package which includes options for healthcare coverage, 401(k), tuition reimbursement, vacation, sick, and holiday pay.

DISCLAIMER:

This job description illustrates the general nature and level of work performed by employees within this job classification. It is not intended to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and skills required. Management retains the right to add or modify duties at any time.

GPC conducts its business without regard to sex, race, creed, color, religion, marital status, national origin, citizenship status, age, pregnancy, sexual orientation, gender identity or expression, genetic information, disability, military status, status as a veteran, or any other protected characteristic. GPC's policy is to recruit, hire, train, promote, assign, transfer and terminate employees based on their own ability, achievement, experience and conduct and other legitimate business reasons.