GRC & IT Risk Analyst

Ametek, Inc.; Berwyn (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

AMETEK, Inc. is seeking a GRC Analyst to lead and administer key components of the IT risk management program, coordinating vulnerability risk tracking, exception management, and third-party risk assessments.

You will partner with Information Security, Audit Services, Legal, Procurement, and stakeholders to identify, assess, monitor, and report risks affecting operations and regulatory compliance. The ideal candidate has strong analytical skills, knowledge of cybersecurity and risk frameworks,

Qualifications

• Bachelor's degree in IT, Cybersecurity, Information Systems, Risk Management, or related field.
• 3–7 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, Risk Management, or Cybersecurity.
• Experience managing IT risk registers, exception management processes, and vulnerability governance programs.
• Experience conducting security and risk assessments for third-party vendors.
• Strong written, verbal, and presentation communication skills.

Responsibilities

• Lead IT Risk Management programs and coordinate risk identification, assessment, and reporting.
• Oversee vulnerability risk tracking, remediation tracking, and risk acceptance reviews.
• Administer and maintain the IT Security Exception Register and related workflows.
• Lead third-party risk assessments and cybersecurity reviews of vendors.
• Collaborate with Procurement, Legal, Information Security, and business sponsors throughout the vendor lifecycle.
• Produce executive risk reports and metrics for governance committees.

Skills

GRC

Risk Management

Vulnerability governance

Third-party risk

Executive reporting

Cross-functional collaboration

Security controls

Education

Bachelor's degree in IT / Cybersecurity

Tools

Bitsight

ServiceNow GRC

OneTrust

AuditBoard

Job description

AMETEK, Inc. is seeking a GRC Analyst to lead and administer key components of the IT risk management program, coordinating vulnerability risk tracking, exception management, and third-party risk assessments.

You will partner with Information Security, Audit Services, Legal, Procurement, and stakeholders to identify, assess, monitor, and report risks affecting operations and regulatory compliance. The ideal candidate has strong analytical skills, knowledge of cybersecurity and risk frameworks,