Senior IT GRC & Risk Compliance Strategist

Midland Credit Management; San Diego (CA); On-site; USD 94,000 - 122,000; Full time

Benefits offered by this job

Health insurance

Tuition Assistance

Volunteer time off

Retirement savings plan

New family support

Work-life balance

Job summary

Encore Capital Group is seeking a Senior GRC Analyst to support day-to-day IT risk, compliance, and data governance activities. You will help define and manage IT policies across SOX, PCI, ISO, and NIST, and drive governance metrics for executives and stakeholders.

The role requires 5+ years in IT risk/compliance and strong knowledge of control frameworks. Collaboration with GPS and business units is essential to optimize risk management across the enterprise.

Qualifications

• Bachelor's degree in a relevant field with 5+ years in IT risk/compliance.
• Experience with SOX, PCI, ISO, NIST frameworks.
• Ability to translate regulatory requirements into IT controls.
• Excellent analytical and communication skills.

Responsibilities

• Audit and contribute to firm-wide IT risk and compliance policy development.
• Support governance framework implementation and KPI/ KRIs reporting.
• Assist with IT risk register and remediation tracking.
• Coordinate with internal/external audits and vendor risk management.
• Perform gap assessments and drive remediation activities across systems.

Skills

IT risk management

Data governance

IT compliance

Policy development

Audit support

Education

Bachelor's degree in Computer Science

Bachelor's degree in Information Systems

Bachelor's degree in Information Technology

Bachelor's degree in Software Engineering

Bachelor's degree in Information Security

Tools

Cobit

MOR

ITIL V3 Expert/Managing Professional

Job description

Encore Capital Group is seeking a Senior GRC Analyst to support day-to-day IT risk, compliance, and data governance activities. You will help define and manage IT policies across SOX, PCI, ISO, and NIST, and drive governance metrics for executives and stakeholders.

The role requires 5+ years in IT risk/compliance and strong knowledge of control frameworks. Collaboration with GPS and business units is essential to optimize risk management across the enterprise.