GRC Risk Management Analyst

ManpowerGroup Global, Inc.; San Jose (CA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical plan

Dental plan

Vision plan

Health Savings Account

Health Flexible Spending Account

Dependent Care FSA

Life Insurance

Disability Insurance

Business Travel Insurance

401(k) with Match

Weekly Pay

Job summary

ManpowerGroup Global, Inc. is seeking a detail-oriented GRC Risk Management Analyst in San Jose, CA. You will support information security and third-party risk initiatives, focusing on risk assessments, vendor management, and control evaluations.

The role requires 1–4 years of experience in risk or information security, a bachelor’s degree, and strong analytical and communication skills. You will work within an inclusive team, leveraging GRC or automation tools to enhance security posture.

Qualifications

• Bachelor’s degree in Information Security, Risk Management, Business, Computer Science, or related field.
• 1–4 years of experience in enterprise risk, third‑party risk, GRC, or information security roles.
• Knowledge of inherent and residual risk, controls, and risk treatment processes.
• Technical understanding of enterprise and cloud environments, including networking, identity management, encryption, and vulnerability management.
• Strong analytical, organizational, stakeholder management, and communication skills, with proficiency in Microsoft Office and familiarity with GRC or automation tools.

Responsibilities

• Conduct comprehensive third-party risk assessments, including due diligence, control evaluation, and ongoing monitoring throughout the vendor lifecycle.
• Administer risk-based vendor questionnaires, review responses, identify gaps, and translate findings into actionable risk ratings and remediation plans.
• Maintain and update enterprise and vendor risk registers with accurate risk statements, ratings, owners, and treatment strategies.
• Analyze security, privacy, resilience, and regulatory risks based on business criticality and data sensitivity.
• Perform technical risk analysis by reviewing system architecture, data flows, cloud configurations, and security controls, ensuring design intent aligns with operational effectiveness.

Skills

Analytical skills

Stakeholder management

Communication

Risk assessment

Education

Bachelor’s degree in Information Security, Risk Management, Business, Computer Science

Tools

Microsoft Office

GRC tools

Automation tools

Job description

Our client, a leading organization in the technology and security sector, is seeking a dedicated and detail-oriented GRC Risk Management Analyst to join their team. As a GRC Risk Management Analyst, you will play a vital role in supporting information security and third-party risk management initiatives. The ideal candidate will demonstrate strong analytical skills, proactive communication, and a passion for enhancing organizational security posture, fostering an inclusive environment where diverse talents thrive.

Job Title:GRC Risk Management Analyst

Location:San Jose, CA

What's the Job?

• Conduct comprehensive third-party risk assessments, including due diligence, control evaluation, and ongoing monitoring throughout the vendor lifecycle.
• Administer risk-based vendor questionnaires, review responses, identify gaps, and translate findings into actionable risk ratings and remediation plans.
• Maintain and update enterprise and vendor risk registers with accurate risk statements, ratings, owners, and treatment strategies.
• Analyze security, privacy, resilience, and regulatory risks based on business criticality and data sensitivity.
• Perform technical risk analysis by reviewing system architecture, data flows, cloud configurations, and security controls, ensuring design intent aligns with operational effectiveness.

What's Needed?

• Bachelor’s degree in Information Security, Risk Management, Business, Computer Science, or a related field.
• 1-4 years of experience in enterprise risk, third-party risk, GRC, or information security roles.
• Knowledge of inherent and residual risk, controls, and risk treatment processes.
• Technical understanding of enterprise and cloud environments, including networking, identity management, encryption, and vulnerability management.
• Strong analytical, organizational, stakeholder management, and communication skills, with proficiency in Microsoft Office and familiarity with GRC or automation tools.

What's in it for me?

• Opportunity to work in a dynamic, inclusive environment that values diverse perspectives.
• Engagement with cutting-edge security technologies and practices.
• Chance to develop your skills in analytics, automation, and AI-assisted workflows.
• Supportive team environment fostering professional growth and continuous learning.
• Work on impactful projects that enhance organizational security and compliance.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay