Lead GRC Analyst — Hybrid IT Risk & Compliance Leader

Msig USA; Warren, New Jersey, United States, Northern America, Americas; Hybrid; USD 120,000 - 160,000; Full time

Job summary

MSIG USA is seeking a Lead Governance, Risk & Compliance (GRC) Analyst to mature security governance, risk management, and compliance activities. You will work hands-on, mentor others, and engage with senior leadership on risk and compliance posture.

The role emphasizes regulatory alignment, audit support, and policy governance, with opportunities to grow into leadership. This hybrid role requires 5–8+ years in GRC or IT security in a regulated industry.

Qualifications

• 5–8+ years of experience in GRC, IT risk management, IT audit, or information security.
• Hands-on experience with regulatory compliance, audits, or risk assessments.
• Working knowledge of NYDFS Cybersecurity Regulation (23 NYCRR 500) and at least one major framework (NIST CSF, ISO 27001).
• Experience maintaining risk registers, audit evidence, or compliance documentation.
• Strong written communication skills to document risks, controls, and findings clearly.

Responsibilities

• Governance & Compliance Execution: Maintain and operate MSIG’s security governance and compliance program; track obligations and deadlines; monitor regulatory changes.
• IT Risk Management: Conduct risk assessments across infrastructure, applications, and cloud; maintain risk register and remediation status.
• Audit & Regulatory Support: Coordinate internal/external audit activities, assist with remediation planning and follow-up.
• Policy & Standards Management: Support policy development, review cycles, and awareness across the organization.
• Third-Party Risk Management: Perform vendor security risk assessments; support due diligence with Procurement and Legal.
• Reporting & Program Support: Prepare GRC metrics and dashboards; support leadership reporting and continuous improvement.

Skills

GRC

IT risk management

IT audits

Regulatory compliance

Documentation

NIST CSF

ISO 27001

Risk registers

Tools

ServiceNow GRC

Archer

OneTrust

Job description

MSIG USA is seeking a Lead Governance, Risk & Compliance (GRC) Analyst to mature security governance, risk management, and compliance activities. You will work hands-on, mentor others, and engage with senior leadership on risk and compliance posture.

The role emphasizes regulatory alignment, audit support, and policy governance, with opportunities to grow into leadership. This hybrid role requires 5–8+ years in GRC or IT security in a regulated industry.