GRC Analyst

Overview

Maintain and develop cybersecurity GRC policies, risk, compliance, and awareness.

Key Responsibilities

• compliance monitoring
• risk assessment
• policy development
• third‑party risk
• security training
• metrics reporting

Tasks

-Sets objectives for own area to meet the objectives or goals of projects and assignments. -May assist other professionals with tasks and assignments. -Monitors compliance and reports effectiveness. -May provide guidance and assistance to entry level professionals and/or support employees. -Partners with auditors and manages action plans in response to audit discoveries. -Ensures appropriate design and operating effectiveness of regulatory and PCI-DSS controls. -implementing risk mitigation measures and fostering secure third-party relationships. -Communicates policies to relevant stakeholders. -Identifies risks and develops mitigation strategies and risk management plans -Independently performs periodic gap assessments to validate compliance. -Develops, organizes, and delivers training sessions to employees on security policies and best practices. -Manages privacy-related data subject access requests. -Works to achieve day-to-day objectives with moderate impact on the area. -Independently develops security awareness training programs and materials. -Manages third-party risk by assessing the security posture of external vendors and partners, -Implements and monitors compliance with cybersecurity control framework. -Collects, analyzes, and presents cybersecurity program performance metrics and key risk indicators (KRIs). -Ensures policies are up-to-date and align with industry best practices, regulatory requirements, and cyber frameworks. -Monitors and reports on the effectiveness of security awareness initiatives. -Independently conducts regular assessments of cyber risks within applications, platforms, and processes. -Plans and executes cybersecurity awareness events and communication campaigns. -Develops and maintains cybersecurity policies, standards, and guidelines. -Monitors regulatory environment and performs impact assessments.

Requirements

• university degree
• nist csf
• pci-dss
• problem solving
• security awareness
• data governance

What You Bring

-Typically requires a university degree or equivalent experience and minimum 2-4 years of prior relevant experience. -Depth of knowledge with cybersecurity control frameworks (NIST CSF preferred) -Working knowledge of cybersecurity policy lifecycle, standards, and guidelines. -Analytic and problem-solving skills. -Experience with PCI-DSS and SOX -Experience with security awareness techniques and processes in an enterprise environment. -Exceptional written and verbal communication skills that can be adjusted to relevant audiences. -Working knowledge of data governance and privacy regulations -Minimum high school diploma or equivalent (GED) required. -Requires practical knowledge of area typically obtained through advanced education combined with experience. -Works independently on larger, moderately complex projects/assignments. -May require travel

People Also Searched For

About Pultegroup

-Known for developing high-quality homes and communities across the U.S. -Builds homes that cater to various lifestyle needs, including single-family homes, townhomes, and active adult communities. -Focus on innovation includes incorporating smart home technologies and energy-efficient features into many of their homes. -Continues to grow and adapt to market trends, positioning itself as a leader in residential construction and community development.

Sector Specialisms