Lead GRC Analyst

Robert Half - Horsham, PA

Full-time - Mid Level

Horsham, PA

Administrative and Support Services

About the position

The Lead GRC Analyst will be responsible for developing and implementing Governance, Risk, and Compliance (GRC) strategies and policies within an IT consulting firm. This role involves leading risk assessments, managing compliance activities, and serving as the primary contact for external audits. The analyst will also monitor regulatory changes and industry trends to ensure the organization remains compliant and proactive in addressing emerging risks.

Responsibilities

• Developing and implementing GRC strategies, policies, and procedures to meet regulatory standards and industry best practices.
• Conducting comprehensive risk assessments, identifying potential risks, and developing mitigation strategies.
• Working with various teams to incorporate GRC principles into our business processes and systems.
• Staying updated with regulatory changes and industry trends to ensure our organization remains compliant and proactive in addressing emerging risks.
• Educating employees on GRC policies, procedures, and best practices.
• Overseeing the execution of audits, assessments, and compliance activities to verify adherence to compliance standards.
• Interacting with external auditors, regulators, and stakeholders on GRC-related issues.
• Developing and maintaining key performance indicators (KPIs) and metrics to assess the effectiveness of GRC initiatives.
• Guiding GRC analysts and fostering their growth within the organization.
• Supporting the Information Security Incident Response team during cyber/privacy incidents.
• Assessing the technical security posture of newly proposed third-party solutions.
• Ensuring the running application and developing codebase protects the confidentiality, integrity, and availability of our customer's data.

Requirements

• Proficiency in Cloud Technologies is necessary.
• The ability to effectively utilise Detection methods is required.
• Knowledge and expertise in Firewall Technologies is essential.
• Familiarity with Intrusion Detection System (IDS) is needed.
• Experience with AB Testing is a key requirement.
• Demonstrable skills in Auditing are obligatory.
• Expertise in Configuration Management is a crucial requirement.
• A strong understanding of Cyber technologies is a must.
• Proficiency in Cyber Security is an essential requirement.

Benefits

• Medical insurance
• Vision insurance
• Dental insurance
• Life insurance
• Disability insurance
• 401(k) plan