ŌURA · 2 days ago

GRC Analyst

New York, NY

Full-time

Onsite

Entry, Mid Level

Wonder how qualified you are to the job?

Maximize your interview chances

Wellness and Fitness Services

Growth Opportunities

Insider Connection @ŌURA

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Conduct and manage Vendor Risk Assessments (VRAs) [TPRM]

Conduct and manage Client Risk Assessments (CRAs) [Security Questionnaires]

Develop and implement Product Risk Assessments (PRAs)

Collaborate on GRC programs ensuring alignment with broader security strategy

Review, create, and update policies and procedures to ensure compliance with relevant laws, regulations, and standards

Manage the external audit program, including engaging necessary teams during audit periods

Collaborate with internal stakeholders to improve Business Continuity Plan (BCP), Continuity of Operations Plan (COOP), Business Impact Analysis (BIA), and Incident Response Plan (IRP)

Conduct User and Access Audits, assessing the effectiveness of offboarding and Role-Based Access Control (RBAC) privilege provisioning processes

Perform internal compliance audits to measure the efficacy of compliance activities in security programs

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

IT SystemsWeb ApplicationsGRCRisk ManagementAudit ManagementPolicy DevelopmentProblem-SolvingAttention to DetailCISACISMCISSP