GRC Risk & Compliance Analyst

Massachusetts-Bay-Transportation-Authority; Boston (MA); On-site; USD 85,000 - 120,000; Full time

Job summary

Massachusetts Bay Transportation Authority (MBTA) is seeking a Governance, Risk, and Compliance Analyst to identify, assess, monitor, and mitigate organizational risks while ensuring regulatory and policy alignment across IT, security, and operations.

You will work with IT, cybersecurity, audit, and leadership to strengthen MBTA's risk management framework, develop dashboards, and support third-party risk assessments and policy governance.

Qualifications

• Bachelor's degree in IT, cybersecurity, information systems, business, finance, risk management, or related field.
• 2+ years of experience in Governance, Risk, Compliance, Information Security, Internal Audit, or Enterprise Risk Management.
• Knowledge of risk management methodologies and control frameworks.
• Familiarity with regulatory and compliance standards (e.g., NIST CSF/800-53, ISO 27001, SOC 2, PCI DSS, HIPAA GDPR, SOX).
• Strong analytical, organizational, and problem‑solving skills.
• Excellent written and verbal communication skills.

Responsibilities

• Identify threats and vulnerabilities across IT, OT, and business processes.
• Maintain MBTA's risk register and track remediation actions and residual risk.
• Develop risk scoring models, prioritization frameworks, and automated reporting feeds.
• Monitor and report compliance against regulatory requirements and internal policies.
• Assist with policy review cycles and enterprise-wide enforcement.
• Perform detailed third-party/vendor security assessments and ongoing monitoring.
• Support internal and external audits with evidence collection and remediation plans.
• Develop risk dashboards, metrics, and executive summaries for leadership.

Skills

GRC frameworks

Risk assessment

Compliance monitoring

Vendor risk

Audit support

Policy governance

Data analysis

Cross-functional collaboration

Education

Bachelor's degree in IT, cybersecurity, information systems, business, finance, risk management, or related field

Job description

Massachusetts Bay Transportation Authority (MBTA) is seeking a Governance, Risk, and Compliance Analyst to identify, assess, monitor, and mitigate organizational risks while ensuring regulatory and policy alignment across IT, security, and operations.

You will work with IT, cybersecurity, audit, and leadership to strengthen MBTA's risk management framework, develop dashboards, and support third-party risk assessments and policy governance.