GRC Analyst: Vendor Risk & Compliance

City of Indianapolis; Indianapolis (IN); On-site; USD 65,000 - 95,000; Full time

Job summary

City of Indianapolis seeks a GRC Analyst to implement internal control reviews, test and monitor access reviews, vendor assessments, and security reviews. The role ensures alignment with regulatory requirements and internal policies, reporting to the CISO.

The candidate will work with the Information Services Agency to support risk, compliance, and data governance initiatives, using ServiceNow and Microsoft Security Suite for oversight and documentation.

Qualifications

• Bachelor’s degree in computer science, information systems, IT, or related field or equivalent work experience.
• 2-3 years in governance, risk and compliance roles.
• Familiarity with risk assessment methodologies and control frameworks (COSO, COBIT, NIST).
• Experience with CIS Benchmarks, NIST, CJIS, PCI and related standards.
• Familiarity with Microsoft Security suite and ServiceNow.

Responsibilities

• Ensure adherence to regulatory requirements and internal policies.
• Monitor CIS Benchmarks, NIST, CJIS, PCI standards and policy.
• Support vendor assessments and scalable evaluation templates.
• Manage Third-party risk via Vendor Risk Management program.
• Collaborate with partners to ensure compliance and data governance.
• Assist incident documentation and root-cause analysis with Security Manager.
• Support data governance and reporting for risk and compliance.

Education

Bachelor’s degree in computer science or related field

2-3 years governance, risk and compliance experience

Strong understanding of risk assessment methodologies

Familiarity with COSO, COBIT, NIST

Experience with CIS Benchmarks, NIST, CJIS, PCI

Microsoft Security suite, ServiceNow

Tools

ServiceNow

Microsoft Security Suite

Job description

City of Indianapolis seeks a GRC Analyst to implement internal control reviews, test and monitor access reviews, vendor assessments, and security reviews. The role ensures alignment with regulatory requirements and internal policies, reporting to the CISO.

The candidate will work with the Information Services Agency to support risk, compliance, and data governance initiatives, using ServiceNow and Microsoft Security Suite for oversight and documentation.