Apply on Employer Site

Avnet · 3 weeks ago

Senior Cybersecurity GRC Analyst

Chandler, Arizona, United States Of America

Full-time

Hybrid

Senior Level, Lead/Staff

8+ years exp

Avnet is a global, FORTUNE ® 500 technology distributor and solutions company that focuses on design, supply chain, and logistics expertise. They are seeking a Senior Cybersecurity Governance, Risk, and Compliance (GRC) Analyst to advance their GRC initiatives across international operations, with responsibilities including conducting cybersecurity assessments, managing compliance, and leading risk management efforts.

Electrical DistributionElectronicsHardwareInternet of ThingsSoftwareSupply Chain Management

No H1B

U.S. Citizen Only

Responsibilities

Lead and execute cybersecurity assessments using recognized frameworks such as NIST CSF and ISO/IEC 27001

Develop, update, and manage cybersecurity policies, standards, and procedures to meet global regulatory requirements

Stay informed about emerging threats, regulatory changes, and industry best practices to guide governance efforts

Design and deliver cybersecurity training and awareness programs tailored to global audiences

Create and manage internal communications related to cybersecurity initiatives, policies, and compliance updates

Conduct risk assessments across business units and regions

Maintain and update risk registers, and support the development of mitigation strategies

Support third-party risk management by assessing vendor security practices and compliance

Support internal and external audit preparation and response activities

Monitor and report on compliance status, risk metrics, and control effectiveness

Ensure alignment with global compliance requirements, including SOX, CMMC, ISO 27001, NIST CSF, NIST 800-171

Qualification

NIST CSFISO/IEC 27001Risk ManagementCybersecurity AssessmentsSOXCMMCNIST 800-171GRC PlatformsStakeholder EngagementEnglish ProficiencyCommunication Skills

Required

In-depth knowledge of cybersecurity standards, regulatory frameworks, and certification requirements, including: Sarbanes-Oxley (SOX), CMMC, ISO/IEC 27001:2022, NIST CSF 2.0, NIST Risk Management Framework, NIST 800-171

Strong communication and stakeholder engagement skills

Business-level proficiency in written and spoken English

Ability to work independently and collaboratively across time zones and cultures

Typically 8+ years with bachelor's or equivalent

Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained

Minimum of six (6) years of experience in cybersecurity GRC roles, preferably in a global enterprise environment

Proven experience in conducting risk assessments, gap analyses, and control testing