Apply on Employer Site

Tungsten Automation · 1 day ago

GRC Analyst

United States

Full-time

Remote

Senior Level, Lead/Staff

$107K/yr - $121K/yr

Tungsten Automation is a company that specializes in Intelligent Automation software for government agencies. They are seeking a GRC Analyst to manage corporate compliance and risk management, conduct audits, and develop risk management strategies to ensure adherence to Information Security policies.

Business Process Automation (BPA)ConsultingRobotic Process Automation (RPA)SoftwareTraining

Responsibilities

Provides point of contact for assigned audits which may include customer audits, statutory/regulatory audits, SOC 2, PCI or others as needed

Serve as company representative with clients and partners, responding to security questionnaires and managing audits

Performs risk assessments, analysis, and synthesis of internal IT & business process controls

Ability to conduct, evaluate, test, and document internal controls assessments

Ability to communicate identified control weaknesses and provided recommendations for remediation and risk mitigation

Compliance audit reviews, and remediation testing of issues identified during third-party assurance reviews or internal assessments

Advises internal business clients on the effectiveness of corrective action plans in the event of non-compliance or detected vulnerabilities in their environment

Contributes to various project requests from functional teams to increase operational efficiency, strengthen the IT environment, and help meet the company's internal and external regulatory or compliance requirements

Performs ad-hoc compliance requests or additional duties as assigned

Qualification

GRC toolsCIS audit programsISO audit programsRisk management toolsClient relationship skillsDocumentation skillsInterpersonal communicationWritten communicationOral communication

Required

Prior experience conducting internal and external risk assessments and compliance measures and / or remediation items and implementing and enforcing policies and procedures

Familiar with GRC tools for managing audit controls, evidence gathering and reporting

Experience with CIS or ISO audit programs

Experience performing third party assurance assessments

Excellent client/interdepartmental relationship and customer service skills, with a clear client focus

High degree of independence and exceptional work ethic with a team player attitude and a detailed- and solution-oriented mind

Familiarity with core IT and Information Security Technologies

Exceptional interpersonal, written, and oral communication skills

Certifications in GRC

Experience with risk management tools

Excellent documentation skills