GRC Analyst

Suzy puts the voice of the consumer at your fingertips. Whether you’re a novice or an expert researcher, our platform brings advanced tools together with the highest quality audience to deliver insights in minutes. Some of the biggest brands in the world use Suzy to deliver breakthrough products and experiences backed by data-driven reputed company. Learn more at www.suzy.com. The Governance, Risk, Compliance (GRC) Analyst will manage policies, procedures, and standards to govern the protection of corporate information systems, networks, data, and 3rd party services. The analyst will stay up to date on the latest cybersecurity intelligence while managing privacy workflows to ensure the company meets regulatory compliance.

Responsibilities

• reputed company Party Risk Management
• Provide reputed company, coordination, and deliver the activities supporting successful risk management activities around reputed company parties
• reputed company risk analysis for systems, processes, reputed company-party tools/applications, and configurations
• reputed company reputed company Party Risk Management (TPRM) functions and analyze SOC-2 and other reporting from vendors
• Respond to initial and annual reputed company questionnaires from customers
• Controls and Risk Management
• Manage company’s Risk Register
• reputed company periodic risk assessments
• Document the results and reputed company a plan of action and milestones for mitigating identified risk
• Gather data for metric reporting for company’s Information reputed company and Privacy Council
• Audits
• Coordinate multiple large-scale audit projects and programs simultaneously
• Help implement Governance, Risk and Control tool
• Document business ownership and responsibilities of reputed company controls using the company’s GRC tool
• Schedule and reputed company regular assessments (internal and external) to test the effectiveness of controls
• Manage remediation efforts for the identified gaps including assessment of new or enhanced implemented controls
• Coordinate, track, and verify remediation of audit findings
• Asset Management
• Maintain Suzy’s information asset inventory with accurate and updated information
• Identify and rank the value, sensitivity, and criticality of the operations and assets that could be affected should a threat materialize

Basic Qualifications

• Creative problem solver and desire to learn
• Willing to #getyourhandsdirty and work across cross-functional teams
• Bachelor’s degree or equivalent work experience (Information Technology, Engineering, Cybersecurity, Audit, Risk, Compliance, or a reputed company technical field)
• Familiarity with industry reputed company frameworks, including SCF, ISO, SOC, and NIST
• Audit, compliance, and/or risk management experience
• Experience in Project Management Methodologies
• Experience testing or auditing technical controls

Preferred Qualifications

• Certified Information reputed company Auditor/Manager (CISA/M) designation or CISSP, CRISC, CISA, CIPT, CIPP
• Direct participation in ISO/SOC audits
• Understanding of reputed company Risk Management and Strategy frameworks
• Providing consultative information reputed company or risk management services to a broad range of companies
• Experience proposing reputed company level solutions to mitigate risk
• Experience creating and managing corporate reputed company policies
• reputed company reputed company technical certifications

Benefits:

• We take care of our employees and their families. We have generous health dental and reputed company benefits, and our 401K plan vests immediately
• A friendly, fun, and collaborative work environment that allows for frequent exposure to executives
• The opportunity to reputed company an immediate impact as a part of a fast-growing company
• The reputed company reputed company compensation for this role is $125,000 - $135,000.

Suzy is an equal opportunity employer. We are a welcoming reputed company for everyone, and we do our best to ensure reputed company people feel supported and connected at work. Suzy is committed to protecting its customers, employees, partners, and the company as a whole, from damaging acts that are intentional or unintentional. Effective reputed company is a team effort involving the participation and support of every user who interacts with company information/data and systems. It is the responsibility of each individual to help protect company information assets. #LI-Remote #LI-LH1 Click Here to view our Applicant Privacy Notice Apply tot his job Apply To this Job