The role involves advanced management of GRC frameworks, risk assessments, compliance initiatives, incident response, and mentorship for junior analysts.
We are seeking an experienced L3 Sr. Operations Analyst specializing in Governance, Risk, and Compliance (GRC) within the cybersecurity domain. This role involves advanced oversight and management of GRC frameworks, ensuring that cybersecurity practices align with organizational goals, regulatory requirements, and industry standards. The ideal candidate will provide expert-level support for escalated GRC operations, conduct risk assessments, and maintain a robust compliance posture across the enterprise.
RequirementsKey Responsibilities:
Governance:
- Develop, implement, and maintain cybersecurity governance frameworks in alignment with industry standards (e.g., ISO 27001, NIST, COBIT).
- Define and enforce cybersecurity policies, standards, and guidelines.
- Monitor adherence to governance structures, ensuring consistency across all business units.
- Provide expert-level support for escalated governance-related issues and inquiries.
- Conduct detailed risk assessments and develop mitigation strategies for identified vulnerabilities and threats.
- Oversee third-party risk assessments to ensure vendor compliance with security policies.
- Implement tools and methodologies to monitor, measure, and report risk metrics (KRIs).
- Collaborate with stakeholders to prioritize and remediate high-risk areas effectively.
- Lead initiatives to ensure compliance with applicable regulations (e.g., GDPR, CCPA, PCI DSS, HIPAA).
- Manage audits and certifications, acting as a liaison between external auditors and internal teams.
- Maintain evidence repositories for audit readiness and ensure timely responses to compliance inquiries.
- Monitor changes in regulatory landscapes and update internal practices accordingly.
- Act as an escalation point for GRC-related incidents, providing advanced analysis and remediation plans.
- Support investigations into non-compliance incidents and implement corrective actions.
- Develop and maintain playbooks for GRC-related incident responses.
- Generate detailed reports on governance, risk, and compliance metrics for senior leadership.
- Communicate findings and recommendations from risk assessments and audits to stakeholders.
- Provide regular updates on the status of GRC programs and initiatives.
- Identify gaps and recommend enhancements to GRC frameworks, tools, and processes.
- Stay updated on emerging GRC technologies, methodologies, and industry trends.
- Mentor and train junior analysts on GRC best practices and tools.
Technical Skills:
- Advanced knowledge of GRC frameworks and tools (e.g., Archer, ServiceNow GRC, MetricStream).
- Expertise in risk assessment methodologies, such as FAIR (Factor Analysis of Information Risk).
- Familiarity with regulatory compliance requirements (e.g., GDPR, SOX, HIPAA, PCI DSS).
- Experience with audit and certification processes for standards like ISO 27001 or SOC 2.
- Proficiency in security and compliance monitoring tools (e.g., Nessus, Qualys, Tenable).
- 5+ years of experience in cybersecurity with a focus on GRC roles.
- Proven track record in leading risk assessments, compliance initiatives, and governance projects.
- Experience in managing enterprise-wide GRC programs across multiple business units.
- Strong analytical skills to interpret risk and compliance data.
- Excellent communication skills for collaboration with technical and non-technical stakeholders.
- Detail-oriented and organized, capable of managing multiple projects simultaneously.
- Certifications: CISM, CRISC, CISSP, ISO 27001 Lead Auditor, or equivalent.
- Familiarity with privacy laws and frameworks (e.g., CCPA, GDPR).
- Experience with cloud security compliance frameworks (e.g., CSA STAR).
Similar Jobs
Information Technology • Pet • Professional Services
The L3 DC Operations Analyst will manage software and hardware asset management processes and support modern data center operations while ensuring compliance and optimizing technologies.
Top Skills:
AWSAzureDatadogFlexeraNagiosPowershellPythonServicenowSnow License ManagerSolarwinds
Information Technology • Pet • Professional Services
The L3 Sr. Operations Analyst in IAM focuses on managing IAM systems, advanced troubleshooting, compliance, and incident response while ensuring security across applications and cloud environments.
Top Skills:
BeyondtrustCyberarkForgerockLdapMicrosoft Azure AdOauthOktaOpenid ConnectPing IdentityPowershellPythonSailpointSAML
Information Technology • Pet • Professional Services
The Automation Engineer L3 will automate IT processes, manage Google Workspace, and provide expert desktop support, focusing on efficiency and system performance.
Top Skills:
Active DirectoryAnsibleAzure AdDesktop SupportGoogle Apps ManagementIntuneItilJIRAMicrosoft Endpoint ManagerOktaPowershellPuppetPythonSccmServicenowVbscript
What you need to know about the Chennai Tech Scene
To locals, it's no secret that South India is leading the charge in big data infrastructure. While the environmental impact of data centers has long been a concern, emerging hubs like Chennai are favored by companies seeking ready access to renewable energy resources, which provide more sustainable and cost-effective solutions. As a result, Chennai, along with neighboring Bengaluru and Hyderabad, is poised for significant growth, with a projected 65 percent increase in data center capacity over the next decade.
