Senior GRC Analyst

This is a fully remote position, open to applicants in Louisiana.

📋 Description

• Oversee the validation, assessment, and authorization processes for IT systems to ensure compliance with cybersecurity and risk standards.

• Work in collaboration with Cybersecurity and IT professionals to achieve governance, risk management, compliance, and GRC support goals.

• Create and execute annual strategic plans along with Board-level reporting.

• Uphold cybersecurity, control, and risk management frameworks, maintaining a secure control library.

• Monitor laws and regulations while aligning requirements with security and cybersecurity frameworks.

• Develop security controls that reflect the organization’s risk appetite and business objectives.

• Generate and sustain IT and cybersecurity governance documentation.

• Establish security-control metrics and key performance indicators.

• Conduct cybersecurity awareness programs and training sessions, including phishing simulations and virtual events.

• Evaluate the technical environment against cybersecurity frameworks and formulate remediation strategies.

• Identify and evaluate risks, security architecture deficiencies, and security risk management plans.

• Compile risk assessments tailored for business, technical, audit, senior management, and Board stakeholders.

• Suggest and coordinate security initiatives to alleviate risks.

• Offer guidance and education on enterprise cybersecurity risk management.

• Engage in acquisitions utilizing risk management practices.

• Develop ongoing control-monitoring schedules and supervise security control evaluations.

• Assess the effectiveness, efficiency, and alignment of controls with tolerance levels.

• Collaborate with auditors, consultants, IT management, cybersecurity staff, and other stakeholders.

• Monitor and manage IT audit findings until resolution.

• Assist in internal and external audit processes with control documentation.

• Lead efforts in process analysis, development, and enhancement.

• Create, test, and deliver solutions, reporting, and relationship-management support.

• Act as a bridge between clients and internal or external stakeholders.

• Support the GRC team with expertise and guidance.

• Interview process owners and evaluate process designs to capture business requirements.

• Mentor and oversee the operational activities of junior team members.

• Carry out other job-related responsibilities as assigned.

⛳️ Requirements

• A Bachelor's degree in IT, Audit, or related fields is required.

• Four years of relevant experience may substitute for a Bachelor's degree.

• A minimum of four years of specialized experience is required.

• Advanced proficiency in various Governance, Risk, and Compliance disciplines is essential.

• Familiarity with at least two of the following areas: technology risk management; governance documentation management; cybersecurity awareness and training; IT/security controls and regulatory compliance; auditing, preferably in IT audit; technical IT infrastructure management; cybersecurity architecture, incident response.

• Strong analytical, critical-thinking, communication, marketing, and consulting skills.

• Practical technical knowledge in cybersecurity, IT infrastructure, cloud technologies, or application development is highly desirable.

• Ability to function with minimal supervision and exercise independent judgment in a remote setting.

• Preferred certifications in multiple areas including cybersecurity, IT governance, information systems audit, compliance, risk management, or computer networking.

• Competence in comprehending, documenting, calculating, visualizing, and analyzing data.

• Preference for candidates who reside in or are willing to relocate to Louisiana.

• Successful completion of background and pre-employment drug screening is required before hire.

• Individuals with felony convictions involving dishonesty or breach of trust must secure written consent from their state insurance commissioner to work in the insurance sector.

🏝️ Benefits

• Resources to promote well-being and health.

• Opportunities for continuous learning and skill enhancement.

• Professional development prospects.

• Chance to contribute to local communities.

• Reasonable accommodations available for individuals with disabilities.

• A smoke- and tobacco-free workplace.

• Pre-employment drug screening conducted after a job offer.

• Background and pre-employment screening conducted after a job offer.