IT GRC Analyst: Risk, Compliance & Audit Lead

Globalstar; Covington (LA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Paid Time Off

Paid Holidays

401(k) Plan with Company Match

Employee Stock Purchase Program

Health Insurance

Dental Insurance

Vision Insurance

FSA

Job summary

Globalstar seeks an IT GRC Analyst to support governance, risk, and compliance programs. You will oversee control activities, assist with audits, and help manage vendor risk while coordinating IT implementation projects and documentation across teams.

Responsibilities include reviewing control evidence, maintaining risk registers, and ensuring regulatory compliance with frameworks like SOC 2, ISO 27001, and SOX. The role requires collaboration with DPO and IT stakeholders.

Qualifications

• Governance, Risk & Compliance practices across IT and business units.
• Audit readiness for SOC 2, ISO 27001, SOX.
• Vendor risk management and third-party due diligence.

Responsibilities

• Execute and monitor governance processes and control activities.
• Coordinate evidence collection and audit responses across teams.
• Maintain and update risk registers and control mappings.
• Support privacy and data protection compliance initiatives as applicable.

Skills

IT governance

Regulatory compliance

Audit coordination

Vendor risk management

Communication skills

Documentation

Education

Bachelor's degree in Business Administration, Information Systems, Risk Management, Security Management, or equivalent

Tools

Drata

OneTrust

SOC 2

ISO 27001

Job description

Globalstar seeks an IT GRC Analyst to support governance, risk, and compliance programs. You will oversee control activities, assist with audits, and help manage vendor risk while coordinating IT implementation projects and documentation across teams.

Responsibilities include reviewing control evidence, maintaining risk registers, and ensuring regulatory compliance with frameworks like SOC 2, ISO 27001, and SOX. The role requires collaboration with DPO and IT stakeholders.