Senior Information Security GRC Analyst, Product Support

Hexagon Metrology - Madison, WI

Full-time - Mid Level

Madison, WI

Computer and Electronic Product Manufacturing

About the position

The Senior Information Security GRC Analyst will be responsible for ensuring that the organization's information security policies and procedures comply with regulatory requirements. This role involves implementing effective risk management strategies and establishing governance frameworks to enhance accountability and transparency within the organization. The analyst will also develop and implement compliance programs to mitigate risks associated with regulatory non-compliance, while maintaining strong relationships with stakeholders.

Responsibilities

• Keep up to date with relevant industry regulations and ensure the organization adheres to applicable laws and standards
• Develop and implement compliance programs to mitigate risks associated with regulatory non-compliance
• Identify, assess, and prioritize risks associated with business operations and IT services
• Develop and implement risk management strategies to minimize the impact of identified risks
• Establish and maintain effective governance frameworks to ensure accountability and transparency
• Collaborate with leadership to define and communicate governance policies and procedures
• Plan and conduct internal audits to evaluate the effectiveness of governance, compliance, and risk management processes
• Work with external auditors and regulators to facilitate external assessments
• Develop and update governance, compliance, and risk management policies to reflect industry best practices and regulatory changes
• Ensure policies are communicated effectively and understood across the organization

Requirements

• In-depth knowledge of IT governance, risk management and compliance principles
• Strong understanding of relevant industry regulations and standards
• Excellent analytical and problem-solving skills
• Effective communication and interpersonal abilities
• Ability to develop and maintain strong relationships with internal and external stakeholders
• Bachelor's, or Master's degree, in Business, IT, Risk Management, or a related field. Education can be substituted for experience.
• 3+ years of experience in a similar role, with a focus on governance, risk management, and compliance within the IT or MSP industry.
• Relevant certifications such as CISA, CRISC, CISM, CISSP, or similar.