IT GRC & Risk Analyst II: Drive Security & Compliance

SECU; North Carolina; On-site; USD 80,000 - 110,000; Full time

Job summary

SECU is seeking an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem to ensure the IT control environment mitigates risks in a changing threat landscape. The role requires broad technical and interpersonal skills to bridge technology and the business.

You will develop risk remediation plans, aggregate and report metrics to senior stakeholders, and work with risk owners and auditors. Minimum 5 years of IT security or IT risk management experience is expected.

Qualifications

• Minimum 5 years IT security or IT risk management experience.
• Experience in a mid-to-large size organization.
• Familiarity with risk management frameworks such as NIST, ISO 27001.

Responsibilities

• Identify, document, and monitor technology risks across internal and external environments.
• Quantify inherent and residual IT risk levels for analytics and reporting.
• Establish remediation plans with milestones and monitor progress.
• Support continuous improvement of risk management processes.
• Aggregate reporting for audits and regulatory issues.
• Partner with stakeholders to report IT risk metrics and KPIs.

Skills

Teamwork

Communication

IT Risk Management

IT Security

Policy development

Job description

SECU is seeking an IT GRC Analyst II to assess, test, document, and monitor the technology ecosystem to ensure the IT control environment mitigates risks in a changing threat landscape. The role requires broad technical and interpersonal skills to bridge technology and the business.

You will develop risk remediation plans, aggregate and report metrics to senior stakeholders, and work with risk owners and auditors. Minimum 5 years of IT security or IT risk management experience is expected.