Senior GRC Analyst (Remote) - Risk, Compliance & Audit

Milliman, Inc.; New York (NY); À distance; USD 96 000 - 181 000; Plein temps

Avantages offerts par ce poste

Medical, Dental and Vision

401(k) Plan

Discretionary Bonus Program

Flexible Spending Accounts

Paid Time Off

Holidays

Family Building Benefits

Paid Parental Leave

Life Insurance & AD&D

Short-Term and Long-Term Disability

Résumé du poste

Milliman, Inc. is seeking a Governance, Risk & Compliance Analyst III (GRC Analyst III) to join the Global Corporate Services Information Security team.

This senior role manages GRC activities, reviews contracts and questionnaires, coordinates audits, and leads automation and AI-enabled improvements to ensure continuous compliance. The ideal candidate will have 6–10 years in information security, risk management, or related IT roles, experience with major frameworks, and strong reporting skills.

Qualifications

• 6–10 years of experience in information security, risk management, audit, compliance, GRC, or related IT roles.
• Hands-on security audit or assessment experience, preferably with a consultancy, professional services, finance, insurance, or similar organization.
• Experience with ISO/IEC 27000 series, NIST CSF, HITRUST CSF, HIPAA, SOC 2, and related security/control frameworks.
• Strong ability to interpret security data and translate complex topics into business language.
• Experience developing dashboards, metrics, KRIs/KPIs, executive reports, and remediation tracking.

Responsabilités

• Contract, Questionnaire, and Document Review: review terms and inquiries, align with policy requirements, coordinate with Legal/Compliance.
• GRC Dashboard, Reporting, and Continuous Compliance: create and maintain dashboards, reports, and automated evidence collection.
• Automation, AI Agents, and Workflow Improvement: design and maintain AI agents and automations for GRC activities and streamline workflows.
• Audit Coordination and Repository Support: coordinate responses to external audits and maintain secure audit repositories.
• Security Awareness and Compliance Support: administer awareness training compliance and monitor metrics.

Connaissances

Information security

GRC

Audit

Risk management

Contract review

Dashboards

Automation

AI/automation

Formation

Bachelor’s or Master’s degree in Computer Science, Engineering, Information Security, or related field

Outils

SIEM

Qualys

Active Directory

VPN

Azure or AWS

Description du poste

Milliman, Inc. is seeking a Governance, Risk & Compliance Analyst III (GRC Analyst III) to join the Global Corporate Services Information Security team.

This senior role manages GRC activities, reviews contracts and questionnaires, coordinates audits, and leads automation and AI-enabled improvements to ensure continuous compliance. The ideal candidate will have 6–10 years in information security, risk management, or related IT roles, experience with major frameworks, and strong reporting skills.