Cloud GRC Analyst

The purpose of the GRC Analyst role:

Governance, risk management, and compliance are three related facets that aim to assure an organization reliably achieves objectives, addresses uncertainty and acts with integrity.

• Governance is the combination of processes established and executed by management that are reflected in the organization's structure and how it is managed and led toward achieving business goals.
• Risk management is predicting and managing risks that could hinder the organization from reliably achieving its objectives under uncertainty.
• Compliance refers to adhering to the mandated boundaries (laws and regulations) and voluntary boundaries (company's policies, procedures).

The GRC function conducts recurring activities with relevant stakeholders to follow up, maintain and improve compliance with the defined control environment.

Key Responsibilities

• The Cloud GRC Analyst role responsibilities will include:
• Be the custodian, develop and maintain an effective policy and control framework.
• Manage and lead information security governance.
• Conduct internal audit review and meetings and support external audit facilitation work covering creating audit checklist, managing audit interviews with internal control owners, following up on remediation action plans for identified findings, and issuing audit reports.
• Manage and coordinate customer assessment/questionnaires/RFP questionnaires to assist SE and Professional Services team in revenue generating activities.
• Manage and coordinate customer audit/remote assessment for Cloud Services team.
• Facilitate and own risk analysis and Cloud Services risk register.
• Establish, monitor, and continuously improve risk management procedures.
• Provide oversight and management of review and audit finding remediation, including generating requirements for full remediation, providing feedback and suggestions on responses to findings, and tracking progress and providing status updates to the management team.