Senior GRC & Cybersecurity Risk Analyst

Hayward Holdings, Inc.; Clemmons (NC); On-site; USD 110,000 - 150,000; Full time

Job summary

Hayward Holdings, Inc. in Clemmons, NC seeks a Senior Cybersecurity Risk & Governance Analyst to advance IT risk, governance, and compliance across SOX, ICFR, and data security.

You will lead risk assessments, control design, and audit support while coordinating with Internal Audit, IT, and business stakeholders. The role covers GRC metrics, policy standards, access governance, third-party risk, and implementation of frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls.

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, IT, Accounting, Risk Management, or related field.
• 5+ years of experience in cybersecurity GRC, IT risk, IT audit, SOX compliance, or information security.
• Strong knowledge of ITGCs, ICFR, logical access, privileged access, change management, and audit evidence requirements.
• Hands-on experience with Varonis or comparable data loss prevention technology.
• Experience with SailPoint or comparable identity governance platforms.

Responsibilities

• Perform cybersecurity risk assessments across applications, infrastructure, cloud services, and technology initiatives.
• Maintain cybersecurity risk registers, remediation plans, control exceptions, and risk treatment activities.
• Map security controls to NIST, ISO 27001, CIS, SOX, and applicable regulatory requirements.
• Develop GRC metrics, KRIs, KPIs, and management reporting to communicate cybersecurity risk and compliance posture.
• Identify opportunities to automate and mature GRC processes.
• Support the design, documentation, testing, and operation of IT General Controls (ITGCs) supporting SOX and ICFR.
• Execute and assess controls covering logical access, privileged access, change management, system operations, and data integrity.
• Produce complete, defensible audit evidence and maintain control narratives, RCMs, and testing documentation.
• Partner with Internal Audit, external auditors, control owners, and IT leadership.
• Identify opportunities for control automation and improved audit efficiency.
• Administer Varonis capabilities supporting sensitive-data discovery, classification, monitoring, and access governance.
• Identify excessive or inappropriate access to sensitive information and remediate permissions.
• Develop reports, dashboards, alerts, and audit evidence related to data security and access.
• Support investigations involving sensitive-data exposure and inappropriate access.
• Perform UARs and access certifications for SOX-related processes.
• Validate provisioning, modification, termination, and privileged access controls.
• Develop SailPoint enhancements: onboarding, entitlement aggregation, role modeling, and lifecycle processes.
• Assist with RBAC modeling and entitlement structures.
• Identify automation opportunities for access governance.
• Coordinate IT and cybersecurity activities supporting audits.
• Manage remediation of security findings and third-party risk assessments.

Skills

Cybersecurity governance

IT risk management

SOX / ICFR knowledge

Audit coordination

Policy development

Stakeholder communication

Independent work

Education

Bachelor's degree in Cybersecurity, Information Systems, IT, Accounting, Risk Management, or related field

Tools

Varonis

SailPoint

SharePoint

Microsoft 365

Job description

Hayward Holdings, Inc. in Clemmons, NC seeks a Senior Cybersecurity Risk & Governance Analyst to advance IT risk, governance, and compliance across SOX, ICFR, and data security.

You will lead risk assessments, control design, and audit support while coordinating with Internal Audit, IT, and business stakeholders. The role covers GRC metrics, policy standards, access governance, third-party risk, and implementation of frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, and CIS Controls.