Cart.com · 9 hours ago

GRC Analyst

United States

Full-time

Remote

Entry Level

2+ years exp

Maximize your interview chances

AnalyticsInformation Technology

No H1B

Insider Connection @Cart.com

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Assist in the development and implementation of a comprehensive Cybersecurity GRC program, aligning with industry-standard frameworks (e.g., NIST CSF, ISO 27001).

Perform risk assessments for systems, processes, third-party applications, and configurations, and recommend mitigation strategies.

Document ownership and responsibilities of controls in Cart.com’s GRC platform and maintain corporate policies.

Manage and support PCI DSS audits, schedule internal and external control assessments, and ensure compliance with privacy regulations (e.g., CCPA, GDPR).

Monitor and improve the security incident management program; assess incidents, secure baselines, and penetration test results.

Lead security training and phishing simulations to mitigate social engineering risks.

Identify and document control failures and gaps, provide remediation guidance, and prepare management reports to track progress.

Assist in managing privacy initiatives, including CCPA, CPRA, GDPR, and other relevant regulations.

Stay informed on emerging cybersecurity threats, best practices, and technology advancements to strengthen Cart.com’s security posture.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Cybersecurity GovernanceRisk ManagementPolicy ManagementAudit & ComplianceIncident ManagementGRC ProgramsInformation SecurityTechnical Controls AuditingCISACISMCIPPCIPMCIPTMicrosoft Cloud CertificationsITIL FoundationsAgile Methodologies