Governance Risk and Compliance Analyst

Client Note: The client is allowing this position to work remote, however candidates cannot work out-of-state. The candidate must be located in GA to accept and continue this position.

Job Description:

Governance, Risk and Compliance (GRC) Analyst to help improve enterprise security and software continuity through regulatory compliance and risk assessment

3 month assignment

Working with business and IT leaders to identify and improve existing control processes.

Evaluating software requirements, risks, and issues.

Perform third-party vendor management, including due diligence and risk review functions.

Review, negotiate, and track vendors and vendor agreements for technical products, solutions or services.

Administering audit and security GRC tools (e.g., RSA Archer, OneTrust) to document, sustain and improve controls.

Managing and maintaining IT's audit program controls. Preparing team members and related materials required for effective audit meetings (e.g., control design walk-throughs), follow-up requests, and testing.

Coordinating the testing and validation of IT General Control (ITGC) processes for SOX and Internal Audit.

Partnering with senior IT leaders to ensure team member accountability for completing audit assignments on schedule with appropriate priority, completeness, and accuracy, in accordance with documented procedures.

Identifying inventory and ranking third parties that present risks to the organization.

Collecting necessary security and audit information from third parties, analyze and recommend control implementation.

Developing standard operating procedures to mature the Third Party Risk Management Program.

Assisting in designing, creating, and maintaining risk-based metrics.

Skill

Required / Desired

Amount

of Experience

IT Risk Management Concepts

Required

5

Years

Evaluating existing software/application environment

Required

3

Years

Evaluating new software request for compliance issues

Required

3

Years

Working with key stakeholders

Required

5

Years