Sr. Analyst, GRC

Experis

Overland Park (KS)

On-site

USD 107,000 - 152,000

Full time

14 days+

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Experis is seeking a Sr. Analyst, GRC to join our Onsite team in Overland Park, KS, with options for Cary, NC or Houston, TX. This temp-to-perm role focuses on governance, risk, and compliance across data security, regulatory requirements, and cyber risk management.

The candidate will assess control design and operation, promote risk awareness, and drive improvements in GRC processes. 40 hours per week, onsite five days, with a max rate of $93.75 per hour.

Qualifications

Bachelor’s degree in information systems, Information Security, or a related field.
7–10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations.
Demonstrated experience supporting GRC functions for global companies.
Solid proficiency in risk assessment methodologies and frameworks.

Responsibilities

Review client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.
Support independent certification and audit by working with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations.
Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice.
Monitor regulatory and legal landscape at a global scale and across market sectors and maintain awareness of compliance requirements.
Act as an informed voice in development of policy and ensure alignment with regulatory, legal, and contractual requirements.
Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams.
Contribute process and subject matter expertise in governance forums and cross-functional committees.
Support establishment, collection, and ongoing improvement of metrics to measure effectiveness of cyber risk management and provide data-driven insight to decision makers and control owners.
Collaborate with peer D&IT groups to collect KPI’s, KRI’s and drive efficiency through automation and other means.
Contribute subject matter expertise through third party risk assessment process
Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk

Skills

GRC experience

Auditing

Risk assessment

Global compliance

Education

Bachelor's degree in information systems or security

Job description

Sr. Analyst, GRC

Onsite 5 days/week - manager is open to Cary, NC / Houston, TX/ Overland Park, KS

Temp to perm

Overview

The Sr. Analyst, Governance, Risk, and Compliance (GRC) plays an important role in the GRC delivery framework, ensuring Black & Veatch’s compliance with contractual and regulatory requirements, assessing control design and operation against common standards and frameworks, and assisting with third-party/supply chain risk management. The candidate will also promote a culture of risk awareness across the enterprise among other responsibilities. With an emphasis on cyber, contract and regulatory compliance risk management, the ideal candidate should be able to contribute to measuring success and identifying improvement opportunities and capabilities development in these areas.

This role is ideal for a detail-oriented professional with a passion for cyber and compliance risk management who is comfortable operating independently. Independent and critical thinking is absolutely necessary to be successful in this role as is a desire to drive efficiencies in function delivery and day-to-day tasks.

Key Responsibilities

Contract Risk Management

Proven experience reviewing client contract provisions related to data security, breach reporting, cyber resilience, and compliance certifications and measuring compliance in IT and security architecture and operations.

Regulatory Compliance Risk Management

Support independent certification and audit by working with D&IT peer groups and lines of business to collect documentation and evidence of security policies and operations
Request and review documentation and evidence from control owners to certify and validate compliance to standards and industry-accepted best practice
Monitor regulatory and legal landscape at a global scale and across market sectors and maintain awareness of compliance requirements

IT Governance

Act as an informed voice in development of policy and ensure alignment with regulatory, legal, and contractual requirements
Assist establishment and enforcement of standards of practice documentation to be referenced by architecture and operations teams
Contribute process and subject matter expertise in governance forums and cross-functional committees

Cyber Risk Management

Support establishment, collection, and ongoing improvement of metrics to measure effectiveness of cyber risk management and provide data-driven insight to decision makers and control owners
Collaborate with peer D&IT groups to collect KPI’s, KRI’s and drive efficiency through automation and other means

Supplier/Third Party Risk Management

Contribute subject matter expertise through third party risk assessment process
Identify and communicate risk of vendor engagements and mitigation actions to business owners and D&IT stakeholders
Assist review of client security requirements in contracts and aggregate relevant clauses to inform contractual risk

Qualifications

Minimum Requirements

Bachelor’s degree in information systems, Information Security, or a related field
7–10 years of experience in GRC executing or auditing against standards, frameworks, and industry regulations
Demonstrated experience supporting GRC functions for global companies
Solid proficiency in risk assessment methodologies and frameworks

Location

Client Location

Country: United States

State/Province: Kansas

City: Overland Park

Address: 11401 Lamar Ave, KCP

POSTAL CODE: 66211

Work Location

Same as Client Location

Other Client Location

Country: United States

State/Province: North Carolina