GRC Analyst I

About the role

The GRC Analyst I supports the GRC program through risk management, policy governance, compliance monitoring, reporting and continuous improvement, and supports emerging AI Governance initiatives (risk identification, assessment, monitoring and reporting for AI technologies). Full-time, onsite at HQ in Fitchburg, Wisconsin. Requires 0-3 years of relevant experience.

Requirements

• Associate's or Bachelor's degree in enterprise risk management, information technology, cybersecurity, business administration, finance, accounting, or related field
• 0-3 years of relevant experience in risk management, governance, compliance, auditing, or related disciplines
• Strong analytical, organizational, and communication skills
• Preferred: experience supporting risk assessments, risk registers, remediation tracking
• Preferred: experience supporting policy management, compliance reviews, control assessments, audit activities
• Preferred: familiarity with NIST CSF, NIST AI RMF, ISO 27001, ISO 31000, ISO 22301
• Preferred: familiarity with CCPA/CPRA, GDPR, PCI DSS
• Preferred: certifications or progress toward ISC2 CC, Security+, CISA, CRISC, CGRC

What you'll do

• Assist with policy governance: development, maintenance, review, administration of policies, standards, procedures
• Support AI Governance program through documentation, inventories, risk assessments, monitoring
• Maintain risk register, risk scoring, mitigation plans, control effectiveness evaluations, dashboards and reporting
• Assist with compliance reviews, internal audits and audit readiness: collect evidence, validate controls, track remediation
• Track and report compliance metrics and audit findings
• Optional: business continuity, third-party risk management, awareness and training

Where this was posted

• Hiring Cafe

  last seen 2h ago
  View on Hiring Cafe