Information Security GRC Analyst IV - ESH

About this kind of role

What a Information Security GRC Analyst IV - ESH usually does. The employer's own details are in the listing.

Typically does: This role focuses on ensuring an organization's information security practices align with relevant regulations, standards, and internal policies. Analysts in this position often conduct risk assessments, develop and implement security governance frameworks, and monitor compliance with security controls. They may also be involved in incident response planning and training programs to raise security awareness. A key responsibility is to maintain documentation and reporting related to security governance and risk management activities.

Tools and skills: Proficiency in risk management methodologies, security frameworks (like NIST, ISO 27001), and compliance regulations (such as GDPR, CCPA) is essential, alongside experience with GRC tools, data analysis, and strong communication skills.

Good fit for: Individuals with a strong analytical mindset, attention to detail, and a passion for maintaining data security and regulatory compliance typically thrive in this role.