GRC & Risk Management Analyst

AMETEK Inc.; Berwyn (PA); On-site; USD 110,000 - 140,000; Full time

Job summary

AMETEK Inc. is seeking a GRC Analyst to lead and administer core components of the IT Risk Management program.

You will coordinate vulnerability risk tracking, exception management, and third-party risk assessments across IT, Security, Legal, and Procurement, reporting to governance committees. The ideal candidate has strong analytics, cybersecurity knowledge, and the ability to communicate risk to both technical and non-technical stakeholders.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Information Systems, Risk Management, Business Administration, or a related field.
• 3-7 years of experience in Governance, Risk & Compliance (GRC), Information Security, IT Audit, Risk Management, or Cybersecurity.
• Experience managing IT risk registers, exception management processes, and vulnerability governance programs.
• Experience conducting security and risk assessments for third-party vendors.
• Strong understanding of cybersecurity principles, security controls, and risk management methodologies.
• Experience preparing executive-level risk reporting and metrics.
• Strong written, verbal, and presentation communication skills.
• Ability to manage multiple priorities and work effectively across cross-functional teams.

Responsibilities

• Administer and maintain the enterprise IT Risk Register.
• Facilitate risk identification, assessment, documentation, and mitigation activities across IT and business functions.
• Conduct qualitative and quantitative risk assessments to evaluate potential business impact and likelihood.
• Collaborate with risk owners to develop and track remediation and mitigation plans.
• Monitor risk treatment activities and provide periodic reporting on risk status, trends, and exposure.
• Prepare risk reports and executive summaries for management and governance committees.
• Support enterprise risk management initiatives and ensure alignment with organizational risk appetite and tolerance statements.

Skills

GRC experience

Information Security

Risk management

Vendor risk

Security reporting

Cross-functional communication

Education

Bachelor's degree in IT, Cybersecurity, IS, Risk Management, Business Admin

Tools

ServiceNow GRC

Bitsight

IntelliGRC

OneTrust

AuditBoard

Job description

AMETEK Inc. is seeking a GRC Analyst to lead and administer core components of the IT Risk Management program.

You will coordinate vulnerability risk tracking, exception management, and third-party risk assessments across IT, Security, Legal, and Procurement, reporting to governance committees. The ideal candidate has strong analytics, cybersecurity knowledge, and the ability to communicate risk to both technical and non-technical stakeholders.