Vulnerability Analyst

We're looking for a GRC Analyst III to join our global Governance, Risk & Compliance team. In this role, you'll partner with IT, Cybersecurity, Privacy, Audit, and Business stakeholders to identify, assess, report, and mitigate technology risks while supporting compliance initiatives and informed business decision-making.

Role & responsibilities

• Manage risk registers, control matrices, and remediation tracking
• Support SOX compliance activities and audit engagements
• Monitor and report on technology and cybersecurity risks
• Drive security awareness and phishing simulation programs
• Review policies, manage exceptions, and strengthen governance processes
• Collaborate with global stakeholders to enhance the organization's GRC program

Preferred candidate profile

• 6+ years of experience in IT Governance, Risk & Compliance (GRC)
• Experience with IT Risk Management, Compliance, Audits, and Vulnerability Management
• Knowledge of frameworks such as NIST, COBIT, CIS Controls, ISO 27001, and ITIL
• Strong stakeholder management and communication skills
• Certifications such as CISA, CISM, CRISC, CISSP, or CCSP are highly desirable