Senior GRC Analyst

Midland Credit Management; San Diego (CA); On-site; USD 94,000 - 122,000; Full time

Benefits offered by this job

Health insurance

Tuition Assistance

Volunteer time off

Retirement savings plan

New family support

Work-life balance

Job summary

Encore Capital Group is seeking a Senior GRC Analyst to support day-to-day IT risk, compliance, and data governance activities. You will help define and manage IT policies across SOX, PCI, ISO, and NIST, and drive governance metrics for executives and stakeholders.

The role requires 5+ years in IT risk/compliance and strong knowledge of control frameworks. Collaboration with GPS and business units is essential to optimize risk management across the enterprise.

Qualifications

• Bachelor's degree in a relevant field with 5+ years in IT risk/compliance.
• Experience with SOX, PCI, ISO, NIST frameworks.
• Ability to translate regulatory requirements into IT controls.
• Excellent analytical and communication skills.

Responsibilities

• Audit and contribute to firm-wide IT risk and compliance policy development.
• Support governance framework implementation and KPI/ KRIs reporting.
• Assist with IT risk register and remediation tracking.
• Coordinate with internal/external audits and vendor risk management.
• Perform gap assessments and drive remediation activities across systems.

Skills

IT risk management

Data governance

IT compliance

Policy development

Audit support

Education

Bachelor's degree in Computer Science

Bachelor's degree in Information Systems

Bachelor's degree in Information Technology

Bachelor's degree in Software Engineering

Bachelor's degree in Information Security

Tools

Cobit

MOR

ITIL V3 Expert/Managing Professional

Job description

Applicants must have current authorization to work in the United States on a full-time basis.Reporting to the Manager or Sr.Manager, IT Risk and Compliance, the Senior GRC analyst will be responsible for supporting the day to day IT compliance, data governance, and IT risk management functions.The role will include primary responsibility for the defining, creating, and managing IT policies and standards in support of legal and regulatory compliance needs as well as general IT and organizational information security practices.PRINCIPAL RESPONSIBILITIES:Audit and assess firm wide plan for IT Risk and Compliance policies and rules - log-in and passwords, etc.Participate in process and control documentation pertaining to controls implementation.Develop and implement operational and enterprise governance frameworks.Perform business impact analysis and assist with development of IT/InfoSec risk register. Operationalization of a metrics and reporting function to continually report on meaningful security, risk and compliance metrics for operational and executive management.Develop and manage the automation of KPIs & KRIs reporting that align with operational/business risk.Support internal and external audit process for relevant compliance concerns and risk management to re mediate new and outstanding issues including PCI, SOX, ISO,NIST,Issuers etc.Support vendor due-diligence process and help to lead and define overall third party risk management efforts including contracts ,performance etc.Perform periodic gap assessments across product lines to validate compliance on an ongoing basis.Driving remediation activities from identification,remediation plan and closure for various information systems and processes.Other data security projects as assigned. Liaise on with GPS counterparts for compliance reporting & continually enhancing the risk & compliance framework implemented for the project.REQUIRED SKILLSET,:Certification:Preferable Cobit, MOR (Management of Risk) and ITIL V3 Expert or ITIL Managing ProfessionalEducation:Education:BachelorField of Study:Computer Science,Information Systems,Information Technology,Software Engineering, Information SecurityExperience:Typically 5 years business experience; exhibit strong basic execution capabilities and begin to take on more responsibilityTechnical Skills:Working knowledge of the regulatory environment Encore operates in and associated requirements - e.g. SOX, PCI, GLBA, ISOOther Skills:Ability to follow guidelines and identify and resolve problemsLanguages:EnglishPREFERRED SKILLSETLanguages: English & Spanish; French a plusEducation:Degree:Master or AdvancedField of Study:Computer Science,Information Systems,Information Technology,Software Engineering,Information SecurityExperience:Experience working for a publicly traded company in a similar role or with a reputable auditing /consulting firmStarting CompensationAnnual Salary: $93,800.00 - $121,800.00 (Amount based on office location, relevant experience, skills, and competencies)If you are wondering why you should work for us, here is something to help you decide:Pay and Bonuses: Earn a competitive salary. All employees are eligible for monthly incentives or annual bonus.Career Progression: Grow at MCM with paid training and development programs – including our very own MCM Academy – as well as a promote-from-within philosophy.Reward and Recognition: We are committed to honoring great results – ranging from informal accolades to formal company-wide awards and prizes like all-inclusive vacations.Tuition Assistance: Pursue a degree or coursework related to your current role, or the role you are striving for.Healthcare Insurance: Take advantage of comprehensive healthcare plans and options to ensure your continued health, plus fitness membership reimbursements, weight watchers, our wellness rewards Program and more.Volunteering Opportunities: Enjoy up to eight hours of paid time off each year to volunteer. We also offer volunteer grants and matching financial donations, up to US$ 2,500 per employee annually.Retirement Savings: Build a strong financial foundation and reach your goals for the future. With all the effort you invest in us, we’re proud to invest in you.New Family Support: Celebrate your new arrival with company paid leave, new parent flex time, and child back-up care options.Team-building: Enjoy experiences that inspire bonds with your colleagues through a wide range of company-sponsored team-building events, such as holiday celebrations and department outings.Work-Life Balance: Enjoy paid and floating holidays, as well as generous paid-time-off.Our compensation and benefits programs were created with an 'Employee-First Approach' focused on supporting, developing, and recognizing YOU. We offer a wide array of wellness and mental health initiatives, support volunteerism, and environmental efforts, encourage employee education through leadership training, skill-building, and tuition reimbursements, and always strive to provide promotion opportunities from within.About UsHeadquartered in the United States, Encore Capital Group (Encore) is a publicly traded international specialty finance company operating in various countries around the globe. Through our businesses - such as Midland Credit Management and Cabot Credit Management - we help consumers to restore their financial health as we further our Mission of creating pathways to economic freedom. Our commitment to building a positive workplace culture and a best-in-class employee experience have earned us accolades including Great Place to Work certifications in many geographies where we operate. If you have a passion for helping others and thrive at a company that values innovation, inclusion and excellence, then Encore Capital Group is the right place for you.Encore Capital Group and all of its subsidiaries are proud to be an equal opportunity employer and are committed to fostering an inclusive and welcoming environment where everyone feels they belong. We encourage candidates from all backgrounds to apply. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other status protected under applicable law. If you wish to discuss potential accommodations related to applying for employment, please contact [e-mail].